All vulnerabilities
CVE-2026-101963

Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used

Juniper Networks Junos OSNetwork & edge
Open in ThreatlineRecord JSON
CVSS
7.5High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.45%Chance of exploitation activity in the next 30 days, higher than 37% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in25.2R2-S2Also 25.4R1-S3, 26.2R1-S2 and 5 moreCVE List
Published14 Oct 2026Updated 14 Oct 2026CVE List

What fixes it

Show all 8 fixed versions
  • 25.2X100-D35-EVOJunos OS EvolvedCVE List
  • 25.4X300-D40-EVOJunos OS EvolvedCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihoming is configured.

Text from CVE List

Affected versions 9

  • Junos OSaffected: 25.2 before 25.2R2-S2CVE List
  • Junos OSaffected: 25.4 before 25.4R1-S3CVE List
  • Junos OSaffected: 26.2 before 26.2R1-S2CVE List
  • Junos OS Evolvedaffected: 25.2 before 25.2R2-S2-EVOCVE List
  • Junos OS Evolvedaffected: 25.4 before 25.4R1-S3-EVOCVE List
  • Junos OS Evolvedaffected: 26.2 before 26.2R1-S2-EVOCVE List
  • Junos OS Evolvedaffected: 23.4X100CVE List
  • Junos OS Evolvedaffected: 25.2X100 before 25.2X100-D35-EVOCVE List
  • Junos OS Evolvedaffected: 25.4X300 before 25.4X300-D40-EVOCVE List

References 1