CVE-2026-101980
9.8CriticalPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-191
Impact
Unauthenticated remote attackers can crash the kernel and trigger a full denial of service on devices with Extended Echo enabled. No prior access or user interaction is required.
Root cause
An integer underflow in the Junos OS kernel occurs during the processing of Extended Echo packets.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to the patched release referenced in JSA112188. If upgrading immediately is not possible, disable Extended Echo configuration on exposed interfaces.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash.