CVE-2026-101980

Summary

An integer underflow vulnerability in Juniper's Junos OS kernel allows unauthenticated attackers to crash the kernel and cause denial of service. This critical flaw can be triggered by configuring Extended Echo and doesn't require any authentication or user interaction.

Exploitability

Exploitation is straightforward as it requires no authentication and can be triggered over the network with a specially crafted packet, making it highly suitable for remote denial-of-service attacks.

Blast radius

The impact could be significant across all Juniper devices running Junos OS with Extended Echo enabled, potentially causing widespread network outages and service disruption.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable Extended Echo functionality immediately or upgrade to Junos OS version 23.4R1 or later which contains the fix for this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.