Is CVE-2026-102028 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102028?

CVE-2026-102028 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-102028

Description

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause a denial of service when multiple UPDATEs occur over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured.