Official Juniper Security Advisories:
- CVE-2026-102178 — BGP FlowSpec Vulnerability (JSA112187)
- CVE-2026-102182 — IKE Remote Code Execution (JSA112196)
Severity: Critical (CVSS v3.1: 9.8)
Overview
Juniper Networks has disclosed two critical vulnerabilities in Junos OS that may affect network infrastructure used alongside FastNetMon for DDoS mitigation.
CVE-2026-102178 — BGP FlowSpec
A stack-based buffer overflow in the BGP routing daemon of Junos OS and Junos OS Evolved may allow a configured BGP FlowSpec peer to compromise the routing engine or cause a denial of service. Exploitation involves FlowSpec route re-advertisement when BGP update-threading is enabled.
CVE-2026-102182 — IKE
A stack-based buffer overflow in the Junos OS Key Management Daemon (kmd) on Juniper MX Series routers may allow an unauthenticated network attacker to execute code with root privileges. The vulnerability requires IKE to be enabled with an RSA-signature IKE policy.
Relevance to FastNetMon Customers
FastNetMon supports automated DDoS mitigation using BGP FlowSpec, including integration with Juniper routers.
Customers using Juniper equipment for BGP FlowSpec-based mitigation should pay particular attention to CVE-2026-102178 and review whether their configurations meet the affected conditions.
CVE-2026-102182 is unrelated to BGP FlowSpec but may affect Juniper MX routers operating within the same network infrastructure.
These vulnerabilities affect Juniper Junos OS, not FastNetMon software.
Recommended Actions
FastNetMon recommends that customers:
- Review the Juniper security advisories to identify affected devices, software versions and configurations.
- Apply the appropriate Juniper security updates. Patches are available for both vulnerabilities.
- Review BGP FlowSpec peering and IKE service accessibility, restricting access to trusted endpoints where appropriate.
- Verify BGP FlowSpec operation and DDoS mitigation functionality following Junos OS upgrades.
Customers should refer to the official Juniper advisories linked above for complete technical details, affected releases and remediation instructions.
About This Notice
FastNetMon is sharing this information to help customers maintain secure and reliable DDoS mitigation infrastructure. The vulnerabilities described are in third-party Juniper software and do not represent identified vulnerabilities in FastNetMon.
