CVE-2026-101995

Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Networks Junos OS l2ald

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

An Improper Validation of Specified Quantity in Input vulnerability in the l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101995

EUVD

EUVD-2026-101444

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1284	The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Validation of Specified Quantity in Input issue in the l2ald component of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent attacker with access to an ICCP peer session to send malformed ICCP packets, causing memory disclosure and disruption of the l2ald daemon.

Detection Guidance

This vulnerability involves malformed ICCP packets affecting the l2ald daemon in Juniper Junos OS and Junos OS Evolved. Detection requires monitoring for unusual traffic patterns or daemon crashes. Check for l2ald process crashes or logs indicating malformed ICCP packets. Use commands like 'show system processes extensive | match l2ald' to verify daemon status and 'show log messages | match l2ald' to inspect logs for errors.

Impact Analysis

An attacker could exploit this to cause memory leaks or crashes in the l2ald daemon, leading to service disruption. This may result in network instability or loss of Layer 2 services on affected devices.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR, HIPAA, or similar standards as it involves memory disclosure and disruption of a daemon via network packets. Compliance risks would depend on how the affected systems are used in a specific environment.

Mitigation Strategies

Apply the latest security patches from Juniper Networks for Junos OS and Junos OS Evolved to address the improper validation issue in l2ald.

Hi! I’m here to help you understand CVE-2026-101995. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70