Medium 5.8Published Jan 15, 2026

CVE-2025-60011Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap

Updated under an hour ago (Oct 27, 2026, 4:00 AM ET)

Does this affect you?

It affects Juniper Networks Junos OS and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Juniper Networks Junos OS

Exploited in the last 30 days

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an availability impact for downstream devices. When an affected device receives a specific optional, transitive BGP attribute over an existing BGP session, it will be erroneously modified before propagation to peers. When the attribute is detected as malformed by the peers, these peers will most likely terminate the BGP sessions with the affected devices and thereby cause an availability impact due to the resulting routing churn. This issue affects: Junos OS: * all versions before 22.4R3-S8, * 23.2 versions before 23.2R2-S5 * 23.4 versions before 23.4R2-S6, * 24.2 versions before 24.2R2-S2, * 24.4 versions before 24.4R2; Junos OS Evolved: * all versions before 22.4R3-S8-EVO, * 23.2 versions before 23.2R2-S5-EVO, * 23.4 versions before 23.4R2-S6-EVO, * 24.2 versions before 24.2R2-S2-EVO, * 24.4 versions before 24.4R2-EVO.

CVSS: 5.8 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Weakness (CWE): CWE-754
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: juniper
NVD analysis: Analyzed
Record last updated: Jan 15, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Juniper Networks Junos OS juniper_networks:junos_os (from the name)	before 22.4R3-S8; from 23.2 before 23.2R2-S5; from 23.4 before 23.4R2-S6; from 24.2 before 24.2R2-S2; from 24.4 before 24.4R2	CNA record
Juniper Networks Junos OS Evolved juniper_networks:junos_os_evolved (from the name)	before 22.4R3-S8-EVO; from 23.2 before 23.2R2-S5-EVO; from 23.4 before 23.4R2-S6-EVO; from 24.2 before 24.2R2-S2-EVO; from 24.4 before 24.4R2-EVO	CNA record
juniper junos juniper:junos	before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; and 37 more ranges	NVD
juniper junos_os_evolved juniper:junos_os_evolved	before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; and 36 more ranges	NVD

References

References

https://supportportal.juniper.net/	vendor-advisory
https://kb.juniper.net/JSA103161	vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.