EXPOSURES › CVE-2026-101990
CVE-2026-101990
CRITICALA stack-based buffer overflow in Juniper's routing protocol daemon allows remote code execution via a malicious BGP flow-spec update.
A stack-based buffer overflow in Juniper's routing protocol daemon (rpd) allows a remote BGP peer to crash the daemon or execute arbitrary code by sending a malicious flow-spec update. DIB organizations must patch Junos OS and Junos OS Evolved immediately, as this critical vulnerability enables remote code execution and could be leveraged for lateral movement or ransomware deployment.
Shame score — A critical remote code execution vulnerability in a widely deployed routing protocol daemon that allows attackers to execute arbitrary code via a standard BGP update, representing a severe avoidable failure in secure coding and patch management.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.