CVE-2026-101950

Summary

A heap-based buffer overflow in Juniper's SVR component allows unauthenticated attackers to cause denial of service and potentially compromise system confidentiality and integrity through malformed IPv4 packets on SRX Series devices.

Exploitability

Exploitation appears feasible with minimal preconditions, requiring only network access to send malformed IPv4 packets to an interface configured for Secure Vector Routing.

Blast radius

The vulnerability could impact all SRX Series devices running Junos OS with SVR enabled, potentially affecting network availability and data integrity across multiple network segments.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable Secure Vector Routing on affected SRX Series devices until a patch is available, or upgrade to Junos OS version 22.4R3 or later if a fixed version is released.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.