Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-101950: Junos OS on SRX devices can crash when malformed IPv4 packets arrive with Secure Vector Routing enabled
CVE-2026-101950 · published today
Summary
Junos OS running on SRX series routers can be forced to stop working if an attacker sends specially crafted IPv4 packets to an interface that has Secure Vector Routing turned on. This could disrupt network traffic and expose data. Apply the latest Juniper security update or disable Secure Vector Routing until the fix is installed.
What to do
- Update juniper networks junos os to version 23.2R2-S7.7 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| juniper networks | junos os | < 23.2R2-S7.7 |
Original advisory text
Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled
A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured for Secure Vector Routing.
References
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Severity
9.3
Critical
Type
CWE-122Heap-based Buffer Overflow
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Track software like this
Free during beta