Juniper Networks Junos OS Vulnerable to Critical BGP Buffer Overflow CVE-2026-33789

A critical vulnerability in Juniper Networks Junos OS allows unauthenticated attackers to potentially execute commands with root privileges. The flaw, tracked as CVE-2026-33789, exists in the routing protocol daemon of both Junos OS and Junos OS Evolved. According to the National Vulnerability Database, the issue is rated as critical with a CVSS score of 9.8.

The vulnerability is a stack-based buffer overflow that occurs when the BGP Monitoring Protocol is enabled. An unauthenticated BGP peer can send crafted route updates to trigger the overflow. This action can cause a denial of service condition or allow an attacker to execute commands at the root level. The weakness is classified under CWE-121 in the NVD records.

Context and Background

The National Vulnerability Database lists two entries for CVE-2026-33789, with CVSS scores of 9.8 and 9.2 respectively. Both records describe the same underlying technical flaw in the routing protocol daemon. The discrepancy in scoring does not change the severity classification, which remains critical in both cases. The vulnerability requires the BGP Monitoring Protocol to be active on the affected device.

This protocol is often used for monitoring and troubleshooting BGP sessions. When enabled, it processes route updates in a way that exposes the rpd process to the buffer overflow condition. Attackers do not need credentials to exploit this flaw, as the BGP peer connection is unauthenticated in this context. The potential for root-level command execution makes this a high-risk vector for network compromise.

Who Is Affected

Multiple versions of Juniper Networks Junos OS are affected by this vulnerability. Users running versions before 23.2R2-S7.7, before 23.4R2-S8.13, before 24.2R2-S5.5, and before 24.4R2-S5 are exposed. The NVD record explicitly states that these specific release branches contain the flaw. Organizations using these older builds must verify their current software version immediately.

Juniper Networks Junos OS Evolved is also impacted by the same issue. Affected versions include those before 23.2R2-S7.7-EVO, before 23.4R2-S8.11-EVO, before 24.2R2-S5.6-EVO, and before 24.4R2-S5-EVO. The presence of the "-EVO" suffix distinguishes these releases from the standard Junos OS branches. Administrators managing hybrid environments need to check both operating system types for compliance with the fixed versions.

What should you do?

Administrators should verify their current Junos OS or Junos OS Evolved version against the affected lists provided by the NVD. If a system is running a vulnerable version, it should be updated to the corresponding fixed release as soon as possible. Until patches are applied, consider restricting BGP Monitoring Protocol access to trusted sources only. Monitor network logs for unusual BGP update patterns that could indicate exploitation attempts.