← Back to CVE List
CVE-2026-101950NVD
Vulnerability Summary
A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured for Secure Vector Routing.
CVSS v4.0 Base Metrics — Score 9.3 (CRITICAL)
Attack VectorNetwork
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredNone
User InteractionNone
Confidentiality (Vulnerable System)High
Integrity (Vulnerable System)High
Availability (Vulnerable System)High
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)Low
CVSS v3.1 Base Metrics — Score 9.8 (CRITICAL)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- Juniper Networks Junos OS < 23.2R2-S7.7
- Juniper Networks Junos OS >= 23.4 and < 23.4R2-S8.13
- Juniper Networks Junos OS >= 24.2 and < 24.2R2-S5.5
- Juniper Networks Junos OS >= 24.4 and < 24.4R2-S5
- Juniper Networks Junos OS >= 25.2 and < 25.2R2-S2
- Juniper Networks Junos OS >= 25.4 and < 25.4R1-S3
- Juniper Networks Junos OS >= 26.2 and < 26.2R1-S2
- Juniper Networks Junos OS 23.2R2-S7.7
- Juniper Networks Junos OS 23.4R2-S8.13
- Juniper Networks Junos OS 24.2R2-S5.5
- Juniper Networks Junos OS 24.4R2-S5
- Juniper Networks Junos OS 25.2R2-S2
- Juniper Networks Junos OS 25.4R1-S3
- Juniper Networks Junos OS 26.2R1-S2