CVE-2026-102072
CVE-2026-102072 · Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request.
CVSS 7.1 · High · EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
junos os
- Versions
- ≥ 0, < 23.2R2-S7.7: Affected (custom)
- ≥ 23.4, < 23.4R2-S8.13: Affected (custom)
- ≥ 24.2, < 24.2R2-S5.5: Affected (custom)
- ≥ 24.4, < 24.4R2-S5: Affected (custom)
- ≥ 25.2, < 25.2R2-S2: Affected (custom)
- ≥ 25.4, < 25.4R1-S3: Affected (custom)
- ≥ 26.2, < 26.2R1-S2: Affected (custom)
Update to 23.2R2-S7.7