CVE-2026-102177: Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used
Awaiting analysis
Published 14-10-2026Last modified 14-10-2026
Vulnerability summary
CVE-2026-102177 is a high (CVSS 7.6) Out-of-bounds Write vulnerability in juniper networks junos os. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 18.2% of scored vulnerabilities.
CVSS score
7.6/10
010
High · v3.1 (CVE.org)EPSS score
0.27%
0%100%
Low · Change unavailableKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Timeline
- 14-10-2026PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service when IS-IS link protection and backup-selection are configured.
CVSS metrics
4 scores · 2 sources · 2 versionsHigh 7.2Preferred score · CVE.org (CNA)
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L/AU:Y/R:A/V:C/RE:MSourcesAll 2 agree
- NVDNIST7.2HighCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:X
High 7.6Preferred score · CVE.org (CNA)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:HSourcesAll 2 agree
- NVDNIST7.6HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
18%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
15-10-202622-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Juniper networks2 products
- junos os< 23.2R2-S7.7 | ≥ 23.4, < 23.4R2-S8.13 | ≥ 24.2, < 24.2R2-S5.5 | ≥ 24.4, < 24.4R2-S5 | ≥ 25.2, < 25.2R2-S2 | ≥ 25.4, < 25.4R1-S3 | ≥ 26.2, < 26.2R1-S2
- junos os evolved< 23.2R2-S7.7-EVO | ≥ 23.4, < 23.4R2-S8.11-EVO | ≥ 24.2, < 24.2R2-S5.6-EVO | ≥ 24.4, < 24.4R2-S5-EVO | ≥ 25.2, < 25.2R2-S2-EVO | ≥ 25.4, < 25.4R1-S3-EVO | ≥ 26.2, < 26.2R1-S2-EVO | 23.4X100 | ≥ 25.2X100, < 25.2X100-D35-EVO | ≥ 25.4X300, < 25.4X300-D40-EVO
1 vendor · 2 products
References
1 links- supportportal.juniper.net/JSA112187Vendor Advisory