Denial of Service Vulnerability in Junos OS for EX4000 Models by Juniper Networks
CVE-2026-21913

8.7HIGH

Key Information:

Vendor

Juniper Networks
Status
Junos Os
Vendor
CVE Published:
15 January 2026

Badges

👾 Exploit Exists

What is CVE-2026-21913?

An Incorrect Initialization of Resource vulnerability exists in the Internal Device Manager (IDM) of Juniper Networks' Junos OS, affecting EX4000 series models. This flaw allows an unauthenticated network attacker to send a high volume of traffic to the device, leading to an FXPC crash and a subsequent restart of the device. This situation causes a complete service outage until the device automatically reboots. The affected configurations include EX4000-48T, EX4000-48P, and EX4000-48MP running specific versions of the OS, making it crucial for users to update their software to the latest versions to mitigate the risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Junos OS EX4000-48T 24.4 < 24.4R2

Junos OS EX4000-48T 25.2 < 25.2R1-S2, 25.2R2

Junos OS EX4000-48T 0 < 24.4R1

References

https://supportportal.juniper.net/JSA106014
vendor-advisory
https://kb.juniper.net/JSA106014
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.