{"id":"CVE-2026-101980","published":"2026-10-14T17:17:50.503","lastModified":"2026-10-15T16:23:06.250","description":"An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-191"],"vendors":[],"products":[],"references":[{"url":"https://supportportal.juniper.net/JSA112188","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An integer underflow vulnerability in Juniper's Junos OS kernel allows unauthenticated attackers to crash the kernel and cause denial of service. This critical flaw can be triggered by configuring Extended Echo and doesn't require any authentication or user interaction.","exploitability":"Exploitation is straightforward as it requires no authentication and can be triggered over the network with a specially crafted packet, making it highly suitable for remote denial-of-service attacks.","blast_radius":"The impact could be significant across all Juniper devices running Junos OS with Extended Echo enabled, potentially causing widespread network outages and service disruption.","remediation":"Disable Extended Echo functionality immediately or upgrade to Junos OS version 23.4R1 or later which contains the fix for this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["denial-of-service","kernel","network"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:50:23.995Z"}}