CVE-2026-33796

Summary

A stack-based buffer overflow in Juniper's routing protocol daemon (rpd) allows external BGP neighbors to execute arbitrary commands with root privileges via BMP route monitoring, potentially leading to complete system compromise.

Exploitability

Exploitation requires an attacker to configure an external BGP neighbor and send malicious BMP route updates, making it moderately difficult but possible for network attackers with access to the BGP configuration interface.

Blast radius

If exploited, this vulnerability could allow attackers to gain full root access to Juniper routers running affected versions of Junos OS or Junos OS Evolved, potentially compromising entire network infrastructures.

Detection

Monitor for unusual BMP route update patterns in system logs and check for unexpected process restarts or abnormal memory usage in the rpd daemon.

Prioritized remediation

Apply the latest available patch for Junos OS version 23.4R3 or later, as specified in the vendor advisory.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.