CVE-2026-101950

A heap-based buffer overflow in Juniper Networks Junos OS on SRX Series allows unauthenticated attackers to cause denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets.

This vulnerability affects the Secure Vector Routing (SVR) component of Juniper Networks Junos OS on SRX Series devices. An unauthenticated attacker can exploit this flaw by sending malformed IPv4 packets to an interface configured for SVR, leading to denial of service and potential data compromise. DIB organizations must ensure these devices are patched promptly to prevent exploitation, as the vulnerability could be leveraged for further attacks or data exfiltration.

Shame score — A critical CVSS 9.8 heap-based buffer overflow in a widely deployed networking OS allows unauthenticated remote exploitation, indicating significant avoidable risk due to delayed patching or insufficient vulnerability management.