CVE-2026-102184
Last modified
CVE-2026-102184 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configured EVPN signaling peer to cause an rpd crash via a malformed SRv6 structure carried in an EVPN route update. The result is a denial of service affecting routing adjacencies.. EPSS estimates a 0.46% chance of exploitation in the next 30 days.
Description
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configured EVPN signaling peer to cause an rpd crash via a malformed SRv6 structure carried in an EVPN route update. The result is a denial of service affecting routing adjacencies.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | Junos OS | >= 23.4, < 23.4R2-S8.13; >= 24.2, < 24.2R2-S5.5; >= 24.4, < 24.4R2-S5; >= 25.2, < 25.2R2-S2; >= 25.4, < 25.4R1-S3; >= 26.2, < 26.2R1-S2 |
| Juniper Networks | Junos OS Evolved | >= 23.4, < 23.4R2-S8.11-EVO; >= 24.2, < 24.2R2-S5.6-EVO; >= 24.4, < 24.4R2-S5-EVO; >= 25.2, < 25.2R2-S2-EVO; >= 25.4, < 25.4R1-S3-EVO; >= 26.2, < 26.2R1-S2-EVO; >= 23.4X100, < 26.2R1-S2-EVO; >= 25.2X100, < 25.2X100-D35-EVO; >= 25.4X300, < 25.4X300-D40-EVO |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-102184?
How severe is CVE-2026-102184?
How do I fix CVE-2026-102184?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-102178A Stack-based Buffer Overflow vulnerability in the BGP routi…9.8
- CVE-2026-102179An Out-of-bounds Write vulnerability in the routing protocol…7.5
- CVE-2026-10218A vulnerability has been found in nextlevelbuilder GoClaw up…5.4
- CVE-2026-102180A Stack-based Buffer Overflow vulnerability in the routing p…7.5
- CVE-2026-102182A Stack-based Buffer Overflow vulnerability in the kmd compo…9.8
- CVE-2026-102183An Improper Validation of Specified Quantity in Input vulner…7.5
- CVE-2026-102185A Loop with Unreachable Exit Condition ('Infinite Loop') vul…7.5
- CVE-2026-102186Untrusted pointer dereference in Windows Network File System…4.7
- CVE-2026-102187Use of uninitialized resource in Windows Kernel allows an au…5.5
- CVE-2026-102188Untrusted pointer dereference in Windows Storage Port Driver…6.8
- CVE-2026-102189Heap-based buffer overflow in Windows Storage allows an auth…7
- CVE-2026-10219A vulnerability was found in nextlevelbuilder GoClaw up to 3…7.3
Are you affected by CVE-2026-102184?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST