An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled.
History

Mon, 19 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 16 Oct 2026 23:30:00 +0000

Type Values Removed Values Added
First Time appeared Juniper Networks
Juniper Networks junos Os
Juniper Networks junos Os Evolved
Vendors & Products Juniper Networks
Juniper Networks junos Os
Juniper Networks junos Os Evolved

Thu, 15 Oct 2026 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20

Wed, 14 Oct 2026 23:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20

Wed, 14 Oct 2026 16:45:00 +0000

Type Values Removed Values Added
Description An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled.
Title Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published: 2026-10-14T16:33:12.658Z

Updated: 2026-10-19T14:11:46.475Z

Reserved: 2026-09-28T16:31:35.504Z

Link: CVE-2026-101987

cve-icon Vulnrichment

Updated: 2026-10-14T20:15:39.458Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-14T17:17:51.110

Modified: 2026-10-15T16:23:06.250

Link: CVE-2026-101987

cve-icon Redhat

No data.