{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/junos-os-mx-series/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-102046"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Junos OS (MX Series)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Juniper Networks"],"content_html":"\u003cp\u003eA vulnerability identified as CVE-2026-102046 affects the netsctp.ko kernel module within Juniper Networks Junos OS on MX Series platforms. This flaw is classified as a Loop with Unreachable Exit Condition, which can be exploited by an unauthenticated network attacker sending specially crafted SCTP (Stream Control Transmission Protocol) packets. When processed by the netsctp.ko module, these packets trigger an infinite loop that causes significant resource exhaustion, ultimately resulting in a system crash or permanent denial of service condition. This vulnerability poses a high risk to availability for network infrastructure relying on MX Series devices, as it requires no prior authentication and can be triggered remotely. Defenders should monitor for unexpected SCTP traffic patterns or device instability in environments utilizing affected versions of Junos OS.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation leads to a complete denial of service for affected Juniper MX Series devices. This disruption can halt critical routing and switching operations, impacting network availability for organizations relying on this hardware. As of the current disclosure, the scope of targeting remains global for any internet-facing or reachable MX Series router running a vulnerable version of Junos OS.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritize the identification of all Juniper MX Series devices currently operating in the environment. Apply vendor-provided security patches or firmware updates addressing CVE-2026-102046 as soon as they are made available by Juniper Networks. Monitor device health and system resource telemetry for sudden spikes in CPU utilization or kernel panics specifically linked to SCTP packet processing.\u003c/p\u003e\n","date_modified":"2026-10-14T18:39:44Z","date_published":"2026-10-14T18:39:44Z","id":"https://feed.craftedsignal.io/briefs/2026-10-netsctp-dos/","summary":"An infinite loop vulnerability (CVE-2026-102046) in the netsctp.ko kernel module of Juniper Junos OS allows unauthenticated remote attackers to cause a denial of service on MX Series devices via crafted SCTP traffic.","title":"DoS Vulnerability in Juniper Networks Junos OS netsctp.ko","url":"https://feed.craftedsignal.io/briefs/2026-10-netsctp-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Junos OS (MX Series)","version":"https://jsonfeed.org/version/1.1"}