← All vulnerabilities
CVE-2026-101980

Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, and 2 more
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash.

Affected versions

  • Juniper Networks Junos OS

    fixed in 23.2R2-S7.7; From 23.4 · fixed in 23.4R2-S8.13; From 24.2 · fixed in 24.2R2-S5.5; From 24.4 · fixed in 24.4R2-S5; From 25.2 · fixed in 25.2R2-S2; From 25.4 · fixed in 25.4R1-S3; From 26.2 · fixed in 26.2R1-S2

References 1

supportportal.juniper.net