CVE-2026-101987
Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Junos OS SRv6

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description
An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-101987
EUVD
EUVD-2026-101483

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Validation of Specified Quantity in Input issue in Juniper Networks Junos OS and Junos OS Evolved. It affects the routing daemon (rpd) and allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm features are enabled.

Detection Guidance

This vulnerability can be detected by monitoring for unexpected IS-IS SRv6 packets when SRv6 and Flexible Algorithm are enabled. Check Junos OS logs for rpd crashes or errors related to IS-IS processing. Use commands like 'show log messages | match rpd' or 'show isis adjacency' to inspect IS-IS sessions. Monitor network traffic for malformed SRv6 packets using packet capture tools like tcpdump.

Impact Analysis

The vulnerability can lead to a denial of service, disrupting network operations. If exploited, it may cause routers to crash or become unresponsive, leading to network outages or degraded performance.

Compliance Impact

This vulnerability causes a denial of service in Juniper Junos OS and Junos OS Evolved when SRv6 and Flexible Algorithm are enabled. It does not directly impact data confidentiality or integrity but may disrupt network availability, which could indirectly affect compliance with standards requiring reliable data access, such as HIPAA for healthcare systems or GDPR for data processing operations.

Mitigation Strategies

Disable SRv6 and Flexible Algorithm features if enabled. Apply the latest Junos OS or Junos OS Evolved patches from Juniper Networks. Monitor network traffic for unusual IS-IS SRv6 packets.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101987. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart