CVE-2026-101937

Awaiting Analysis Awaiting Analysis - Queue

Signed to Unsigned Conversion Error in Juniper Networks Junos OS SRX Series

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker to cause a denial of service of the data plane via chassis-cluster fabric traffic.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101937

EUVD

EUVD-2026-101489

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-195	The product uses a signed primitive and performs a cast to an unsigned primitive, which can produce an unexpected value if the value of the signed primitive can not be represented using an unsigned primitive.

Attack-Flow Graph

Executive Summary

This vulnerability is a Signed to Unsigned Conversion Error in the srxpfe component of Juniper Networks Junos OS on SRX Series devices. It allows an adjacent attacker to disrupt the data plane by sending specially crafted chassis-cluster fabric traffic, leading to a denial of service.

Detection Guidance

Detection of this vulnerability requires monitoring for abnormal data plane behavior or fabric traffic anomalies in Juniper Networks Junos OS on SRX Series devices. Check for unexpected system crashes, packet drops, or fabric link issues. Juniper recommends inspecting logs for chassis-cluster fabric traffic errors and verifying the integrity of signed packets.

Impact Analysis

The vulnerability can cause a denial of service on the data plane of affected Juniper SRX Series devices. This may result in network outages, loss of connectivity, or degraded performance for users and services relying on the device.

Compliance Impact

This vulnerability causes a denial of service in the data plane via chassis-cluster fabric traffic, which could disrupt network availability. Such disruptions may impact compliance with standards like GDPR or HIPAA that require continuous availability of critical systems handling personal or health data.

Mitigation Strategies

Apply the latest Junos OS update from Juniper Networks to patch the srxpfe vulnerability. Monitor chassis-cluster fabric traffic for unusual patterns that may indicate exploitation attempts.

Hi! I’m here to help you understand CVE-2026-101937. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70