p PatchFirst

CVE-2026-101963

CVE-2026-101963 · Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihoming is configured.

CVSS 8.7 · High · EPSS 0.4%

Published
Updated

Affected products and versions

  • junos os

    Versions
    • ≥ 25.2, < 25.2R2-S2: Affected (custom)
    • ≥ 25.4, < 25.4R1-S3: Affected (custom)
    • ≥ 26.2, < 26.2R1-S2: Affected (custom)

    No fix published

  • junos os evolved

    Versions
    • ≥ 25.2, < 25.2R2-S2-EVO: Affected (custom)
    • ≥ 25.4, < 25.4R1-S3-EVO: Affected (custom)
    • ≥ 26.2, < 26.2R1-S2-EVO: Affected (custom)
    • 23.4X100: Affected (custom)
    • ≥ 25.2X100, < 25.2X100-D35-EVO: Affected (custom)
    • ≥ 25.4X300, < 25.4X300-D40-EVO: Affected (custom)

    No fix published

Original sources

Check your server →