EXPOSURES › CVE-2026-102178
CVE-2026-102178
CRITICALA stack-based buffer overflow in Juniper's BGP routing daemon allows a malicious flowspec peer to compromise the routing engine or cause denial of service when BGP update-threading is enabled.
This vulnerability enables remote code execution via a malicious BGP peer, directly threatening network integrity and availability. DIB organizations must patch Juniper Junos OS and Junos OS Evolved immediately, as this flaw could allow attackers to pivot into critical routing infrastructure. Failure to patch exposes the organization to supply-chain-style attacks and potential FCA settlements due to negligent patch management.
Shame score — A critical CVSS 9.8 vulnerability in core routing infrastructure that allows remote compromise via a standard BGP protocol feature, indicating severe negligence in patching and hardening network devices.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is enabled.