CVE-2026-101987
Full vulnerability record from the local CVENow database.
Description
An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled.
Severity
HIGH
CVSS score
7.1
(v4.0)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-10-14 17:17:51.110000
Last modified
2026-10-29 21:17:07.260000
View original CVE JSON
{
"id": "CVE-2026-101987",
"sourceIdentifier": "[email protected]",
"published": "2026-10-14T17:17:51.110",
"lastModified": "2026-10-29T21:17:07.260",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Juniper Networks",
"product": "Junos OS",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "23.2R2-S7.7",
"versionType": "custom",
"status": "affected"
},
{
"version": "23.4",
"lessThan": "23.4R2-S8.13",
"versionType": "custom",
"status": "affected"
},
{
"version": "24.2",
"lessThan": "24.2R2-S5.5",
"versionType": "custom",
"status": "affected"
},
{
"version": "24.4",
"lessThan": "24.4R2-S5",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.2",
"lessThan": "25.2R2-S2",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.4",
"lessThan": "25.4R1-S3",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.2",
"lessThan": "26.2R1-S2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Juniper Networks",
"product": "Junos OS Evolved",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "23.2R2-S7.7-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "23.4",
"lessThan": "23.4R2-S8.11-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "24.2",
"lessThan": "24.2R2-S5.6-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "24.4",
"lessThan": "24.4R2-S5-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.2",
"lessThan": "25.2R2-S2-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.4",
"lessThan": "25.4R1-S3-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "26.2",
"lessThan": "26.2R1-S2-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "23.4X100",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.2X100",
"lessThan": "25.2X100-D35-EVO",
"versionType": "custom",
"status": "affected"
},
{
"version": "25.4X300",
"lessThan": "25.4X300-D40-EVO",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "LOW",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-14T20:15:38.635375Z",
"id": "CVE-2026-101987",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1284"
}
]
}
],
"references": [
{
"url": "https://supportportal.juniper.net/JSA112187",
"source": "[email protected]"
}
]
}