Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-101980: Junos OS may reboot when Extended Echo is enabled
CVE-2026-101980 · published today
Summary
If a Junos OS router has the Extended Echo feature turned on, a specially crafted network packet can make the system’s core software crash and restart, interrupting traffic. An attacker on the network does not need credentials to trigger this. Disable the Extended Echo feature or install the latest software update from Juniper to prevent the crash.
What to do
- Update juniper networks junos os to version 23.2R2-S7.7 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| juniper networks | junos os | < 23.2R2-S7.7 |
Original advisory text
Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled
An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash.
References
- https://supportportal.juniper.net/JSA112188 vendor-advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Severity
9.3
Critical
Type
CWE-191Integer Underflow (Wrap or Wraparound)
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Track software like this
Free during beta