CVE-2026-101950

Awaiting Analysis Awaiting Analysis - Queue

Heap-based Buffer Overflow in Juniper Networks Junos OS SRX Series

Publication date: 2026-10-14

Last updated on: 2026-10-17

Assigner: Juniper Networks, Inc.

Description

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured for Secure Vector Routing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-17

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101950

EUVD

EUVD-2026-101471

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

This is a Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series. It allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity by sending malformed IPv4 packets to an interface configured for Secure Vector Routing.

Detection Guidance

Detection requires monitoring for malformed IPv4 packets targeting interfaces configured for Secure Vector Routing. Juniper recommends inspecting packet captures for unusual IPv4 traffic patterns and enabling logging on affected SRX Series devices. Use commands like 'show security log' and 'show system statistics protocol ip' to analyze traffic anomalies.

Impact Analysis

An attacker could exploit this to crash systems, disrupt services, or gain unauthorized access to sensitive data. The high CVSS scores (9.3 v4.0, 9.8 v3.1) indicate severe impact on confidentiality, integrity, and availability.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR (data protection) and HIPAA (health data security). Unauthorized access or data exposure may result in legal penalties, fines, and reputational damage.

Mitigation Strategies

Apply the latest Junos OS security patches from Juniper Networks immediately. Disable Secure Vector Routing (SVR) on affected SRX Series interfaces if not required. Monitor network traffic for malformed IPv4 packets targeting SVR-enabled interfaces.

Hi! I’m here to help you understand CVE-2026-101950. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70