CVE-2026-102081

Awaiting Analysis Awaiting Analysis - Queue

Memory Leak in Juniper Junos OS PFE

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS). On SRX4000 Series, and SRX5000 Series with SPC3, and MX Series with SPC3, when one or more specific application services like ALGs, IDP/DPI, APPID, SECINTEL, AAMW or AppQoE are configured, a high connections per second churn will cause PFE memory to leak. If the memory is exhausted traffic processing will be impacted. Use the CLI command show security monitoring to monitor the memory utilization of the PFEs on the FPCs. This issue affects Junos OS on SRX Series and MX Series: * 23.4 versions from 23.4R2-S3 before 23.4R2-S7; * 24.2 versions from 24.2R2 before 24.2R2-S3; * 24.4 versions before 24.4R2-S3; * 25.2 versions before 25.2R1-S2, 25.2R2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102081

EUVD

EUVD-2026-101463

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 23.4R2-S3
Juniper	Networks	Junos OS 24.2R2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This is a Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on SRX Series. It allows an unauthenticated attacker to cause a Denial-of-Service by leaking memory in the packet forwarding engine when specific services like ALGs, IDP/DPI, or AppQoE are configured. Memory exhaustion disrupts traffic processing.

Detection Guidance

Use the CLI command 'show security monitoring' to monitor the memory utilization of the PFEs on the FPCs. High memory usage may indicate a leak.

Impact Analysis

The vulnerability can cause a complete Denial-of-Service, disrupting network traffic processing. Systems with high connection churn rates may experience memory leaks leading to service outages or degraded performance.

Compliance Impact

This vulnerability causes a Denial-of-Service (DoS) by exhausting memory in network devices, which can disrupt critical services. For GDPR, this may lead to unauthorized disruptions in data processing systems, potentially violating availability requirements under Article 32. For HIPAA, it could impact the integrity and availability of protected health information systems, risking compliance with the Security Rule.

Mitigation Strategies

Upgrade Junos OS to a fixed version: 23.4R2-S7 or later, 24.2R2-S3 or later, 24.4R2-S3 or later, or 25.2R1-S2/R2 or later. Disable affected application services if immediate upgrade is not possible.

Hi! I’m here to help you understand CVE-2026-102081. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70