Findings

CVE-2026-102072

Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled

Published Oct 14, 2026 · updated Oct 15, 2026 · Juniper Networks Junos OS

An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2026 · NIST NVD

    Detected

    An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request.

  2. Oct 14, 2026 · NIST NVD

    Updated

    An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request.

  3. Oct 15, 2026 · NIST NVD

    Updated

    An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request.

Affected

  • vendor Juniper Networks Junos OSversion unspecified

Sources

  • CIRCL Vulnerability LookupVulnerability recordCVE-2026-102072

    An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request.

    vulnerability.circl.lu
  • CVE.orgVulnerability recordCVE-2026-102072

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-102072

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDVulnerability recordCVE-2026-102072

    An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request.

    nvd.nist.gov

References

CVE-2026-102072 · ZeroDay Findings