Denial-of-Service Vulnerability in Junos OS on MX Series by Juniper Networks
CVE-2026-102077

8.7HIGH

Key Information:

Vendor

Juniper Networks
Status
Junos Os
Vendor
CVE Published:
14 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-102077?

A vulnerability exists in Juniper Networks' Junos OS for MX Series routers that permits unauthenticated attackers to launch a Denial-of-Service attack. Specifically, malformed IPv6 packets sent to devices utilizing the SPC3 line card can cause unnecessary session creation, leading to resource allocation problems. Continuous transmission of these packets may exhaust session or NAT resources, crippling traffic flow through the device until a restart is performed. Monitoring commands are available to track session and resource usage to help mitigate the impact.

Affected Version(s)

Junos OS MX Series with SPC3 0 < 23.2R2-S4

Junos OS MX Series with SPC3 23.4 < 23.4R2-S5

Junos OS MX Series with SPC3 24.2 < 24.2R2

References

https://supportportal.juniper.net/JSA112182
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.