Patch Junos OS to block unauthenticated root access via BGP flaw

Juniper Networks has identified a critical security flaw in its Junos OS software that allows attackers to take full control of network routers without needing a password. This vulnerability exists in the routing protocol daemon and is triggered when the BGP Monitoring Protocol feature is turned on. According to the National Vulnerability Database, the issue is rated as critical with a CVSS score of 9.8. System administrators must act quickly to update their devices or disable the affected feature to prevent unauthorized access.

In plain English

The problem stems from a coding error in how the router handles incoming data for the Border Gateway Protocol. When the BGP Monitoring Protocol is enabled, the router listens for status updates from its peers. An attacker can send specially crafted data that is larger than the system expects. This causes a stack-based buffer overflow, which is like pouring too much water into a small cup. The excess data spills over into other parts of the computer’s memory, allowing the attacker to run commands as the root user.

The background

This vulnerability, tracked as CVE-2026-33789, affects multiple versions of Juniper Networks Junos OS and Junos OS Evolved. According to the NVD record, affected versions include Junos OS before 23.2R2-S7.7, before 23.4R2-S8.13, before 24.2R2-S5.5, and before 24.4R2-S5. For Junos OS Evolved, versions before 23.2R2-S7.7-EVO, before 23.4R2-S8.11-EVO, before 24.2R2-S5.6-EVO, and before 24.4R2-S5-EVO are at risk. The flaw is classified under CWE-121, which refers to stack-based buffer overflows.

What changes now

Network operators must verify whether their devices are running vulnerable versions of the software. If the BGP Monitoring Protocol is currently in use, administrators should consider disabling it immediately as a temporary mitigation. According to the source material, the vulnerability allows an unauthenticated BGP peer to cause a denial of service. This means an attacker does not need to log in to disrupt the network. They only need to send the malicious data over the internet or private network links.

Key terms explained

Buffer overflows occur when software writes more data to a memory block than it can hold. This often allows attackers to overwrite adjacent memory, potentially executing malicious code. BGP is the protocol that directs internet traffic between networks. BGP Monitoring Protocol is a feature that lets administrators observe BGP sessions for troubleshooting. If this feature is not needed, teams usually disable it to reduce the attack surface. Check whether your devices have this feature enabled before applying updates.

What to do and how to stay safe: Juniper Networks

• Verify if your Junos OS devices are running versions listed as affected in the NVD record.
• Disable the BGP Monitoring Protocol feature on devices that cannot be patched immediately.
• Apply the latest security updates from Juniper Networks once available for your specific version.
• Monitor network logs for unusual BGP activity or signs of unauthorized command execution.

Step-by-step guide: Risk-Based Vulnerability Management: Benefits, Limits, and Reality

General security guidance from the Vector Update newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Is this vulnerability being actively exploited in the wild?

The source material does not state whether the flaw is currently being exploited in active attacks.

What is the severity rating for CVE-2026-33789?

The National Vulnerability Database rates this vulnerability as Critical with a CVSS score of 9.8.

Which Juniper products are affected by this buffer overflow?

Juniper Networks Junos OS and Junos OS Evolved versions prior to the specified release dates are affected.