{"id":"CVE-2026-101950","published":"2026-10-14T17:17:47.877","lastModified":"2026-10-17T04:16:46.700","description":"A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured for Secure Vector Routing.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://supportportal.juniper.net/JSA112186","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Juniper's SVR component allows unauthenticated attackers to cause denial of service and potentially compromise system confidentiality and integrity through malformed IPv4 packets on SRX Series devices.","exploitability":"Exploitation appears feasible with minimal preconditions, requiring only network access to send malformed IPv4 packets to an interface configured for Secure Vector Routing.","blast_radius":"The vulnerability could impact all SRX Series devices running Junos OS with SVR enabled, potentially affecting network availability and data integrity across multiple network segments.","remediation":"Disable Secure Vector Routing on affected SRX Series devices until a patch is available, or upgrade to Junos OS version 22.4R3 or later if a fixed version is released.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","network","rce"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:50:07.502Z"}}