{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2026-102176/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:juniper_networks:junos_os:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-101950"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Junos OS (SRX Series)","Junos OS","Junos OS Evolved","Junos OS (24.4 \u003c 24.4R2-S4, 25.2 \u003c 25.2R2-S1, 25.4 \u003c 25.4R1-S3)","Junos OS (23.4R2-S3 to \u003c23.4R2-S7)","Junos OS (24.2R2 to \u003c24.2R2-S3)","Junos OS (\u003c24.4R2-S3)","Junos OS (\u003c25.2R1-S2, 25.2R2)","Junos OS (MX Series with SPC3 line-card)"],"_cs_severities":["critical"],"_cs_tags":["vulnerability","network-infrastructure","juniper","rce","dos","networking","remote-code-execution","cve","denial-of-service","network-security","infrastructure","routing","juniper-junos","cve-2026-102037","command-injection","junos","cve-2026-102176","bgp"],"_cs_type":"advisory","_cs_vendors":["Juniper Networks"],"content_html":"\u003cp\u003eA critical heap-based buffer overflow vulnerability (CVE-2026-101950) has been identified in the Secure Vector Routing (SVR) component of Juniper Networks Junos OS, specifically affecting SRX Series firewalls. This vulnerability allows an unauthenticated, remote attacker to trigger a crash (denial of service) or potentially compromise system confidentiality and integrity by sending specially crafted IPv4 packets to an interface configured for SVR. The vulnerability arises from improper memory handling within the SVR process. Given the high CVSS score of 9.8 and the fact that exploitation occurs via network packets targeting infrastructure devices, this poses a significant risk to network availability and segmentation security. Defenders should ensure that SVR configurations are reviewed and apply vendor-provided patches as soon as they become available.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability results in an immediate denial-of-service condition, disrupting network traffic handled by the affected SRX Series device. Furthermore, as the vulnerability is a buffer overflow, it provides a pathway for an attacker to achieve unauthorized memory access, potentially leading to remote code execution and the subsequent compromise of data confidentiality and integrity across the internal network.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all SRX Series devices with Secure Vector Routing (SVR) enabled.\u003c/li\u003e\n\u003cli\u003eMonitor SRX device logs and interface traffic for malformed or high-frequency IPv4 packets targeting SVR-enabled interfaces.\u003c/li\u003e\n\u003cli\u003ePrioritize the application of vendor patches for Junos OS once released by Juniper Networks to address CVE-2026-101950.\u003c/li\u003e\n\u003cli\u003eImplement access control lists (ACLs) to restrict traffic reaching SVR-configured interfaces to known, trusted sources until patches can be applied.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T20:32:42Z","date_published":"2026-10-14T18:32:31Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-101950/","summary":"An unauthenticated heap-based buffer overflow in the Secure Vector Routing (SVR) component of Juniper Junos OS allows remote attackers to trigger denial-of-service or potentially execute arbitrary code via malformed IPv4 packets.","title":"Heap-based Buffer Overflow in Juniper Junos OS SVR Component","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-101950/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2026-102176","version":"https://jsonfeed.org/version/1.1"}