CVE-2026-102178

Summary

A stack-based buffer overflow in Juniper's BGP routing daemon allows a configured BGP flowspec peer to compromise routing engines or cause denial of service when BGP update-threading is enabled. This vulnerability arises from improper bounds checking during flowspec route re-advertisement.

Exploitability

Exploitation requires a configured BGP flowspec peer with access to the network, making it moderately difficult but possible to achieve remote code execution on routing engines.

Blast radius

If exploited, this vulnerability could compromise multiple routing engines across affected Juniper devices, potentially causing widespread network outages and routing disruptions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable BGP update-threading feature immediately until a patch is available, or upgrade to Junos OS version 23.4R1 or later if a fixed version is released.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.