← Back to CVE List
CVE-2026-102063NVD
Vulnerability Summary
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF.
CVSS v4.0 Base Metrics — Score 7.1 (HIGH)
Attack VectorAdjacent
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredNone
User InteractionNone
Confidentiality (Vulnerable System)None
Integrity (Vulnerable System)None
Availability (Vulnerable System)High
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)Low
CVSS v3.1 Base Metrics — Score 6.5 (MEDIUM)
Attack VectorAdjacent
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityNone
IntegrityNone
AvailabilityHigh
Affected & Patched Versions
- Juniper Networks Junos OS < 23.2R2-S7.7
- Juniper Networks Junos OS >= 23.4 and < 23.4R2-S8.13
- Juniper Networks Junos OS >= 24.2 and < 24.2R2-S5.5
- Juniper Networks Junos OS >= 24.4 and < 24.4R2-S5
- Juniper Networks Junos OS >= 25.2 and < 25.2R2-S2
- Juniper Networks Junos OS >= 25.4 and < 25.4R1-S3
- Juniper Networks Junos OS >= 26.2 and < 26.2R1-S2
- Juniper Networks Junos OS 23.2R2-S7.7
- Juniper Networks Junos OS 23.4R2-S8.13
- Juniper Networks Junos OS 24.2R2-S5.5
- Juniper Networks Junos OS 24.4R2-S5
- Juniper Networks Junos OS 25.2R2-S2
- Juniper Networks Junos OS 25.4R1-S3
- Juniper Networks Junos OS 26.2R1-S2