{"id":"CVE-2026-33789","published":"2026-10-14T17:18:27.763","lastModified":"2026-10-15T16:24:19.073","description":"A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protocol (BMP) is enabled.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://supportportal.juniper.net/JSA112187","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Juniper's routing protocol daemon allows unauthenticated BGP peers to trigger denial of service or execute commands as root when BMP is enabled, potentially compromising entire network infrastructure.","exploitability":"Exploitation requires an unauthenticated BGP peer to send crafted route updates, making it relatively easy to exploit with minimal prerequisites.","blast_radius":"The vulnerability could impact all network devices running Junos OS or Junos OS Evolved with BMP enabled, potentially causing widespread outages and unauthorized root access across the affected network.","remediation":"Disable BMP functionality on affected routers until a patch is available, as no fixed version has been published yet.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","network","dos","bgp"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:51:40.654Z"}}