CVE-2026-101950
9.8CriticalPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-122
Impact
Unauthenticated remote attackers can crash the device or compromise confidentiality and integrity by sending malformed IPv4 packets. They only need network access to an interface configured for Secure Vector Routing.
Root cause
A heap-based buffer overflow flaw exists in the Secure Vector Routing (SVR) component when handling incoming malformed IPv4 packets.
Affected systems
Juniper Networks Junos OS on SRX Series; specific versions not listed — check vendor advisory JSA112186.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to the patched Junos OS release referenced in Juniper advisory JSA112186. As an interim workaround, disable Secure Vector Routing (SVR) or restrict IPv4 traffic reaching SVR-enabled interfaces.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured for Secure Vector Routing.