CVE-2026-33789

Summary

A stack-based buffer overflow in Juniper's routing protocol daemon allows unauthenticated BGP peers to trigger denial of service or execute commands as root when BMP is enabled, potentially compromising entire network infrastructure.

Exploitability

Exploitation requires an unauthenticated BGP peer to send crafted route updates, making it relatively easy to exploit with minimal prerequisites.

Blast radius

The vulnerability could impact all network devices running Junos OS or Junos OS Evolved with BMP enabled, potentially causing widespread outages and unauthorized root access across the affected network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable BMP functionality on affected routers until a patch is available, as no fixed version has been published yet.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.