EXPOSURES › CVE-2026-101982
CVE-2026-101982
CRITICALA stack-based buffer overflow in Juniper's routing protocol daemon allows remote root code execution via BGP/EVPN route advertisements.
A stack-based buffer overflow in Juniper's routing protocol daemon (rpd) allows a configured BGP/EVPN peer to execute root code on Junos OS or crash the daemon on Junos OS Evolved. DIB organizations must patch this critical vulnerability immediately, as it enables remote code execution without requiring authentication, directly impacting compliance with NIST 800-171 requirements for mitigating known vulnerabilities and preventing unauthorized access.
Shame score — A critical CVSS 9.8 vulnerability enabling remote root code execution in a routing protocol daemon is a severe, avoidable failure that exposes network infrastructure to arbitrary code execution.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an EVPN-VPWS service.