CVE-2026-101987

Status: Awaiting AnalysisHigh (7.1)—

Severity7.1High · CVSS 4.0

Exploitation probability0.27 %higher than 18% of CVEs

Active exploitationNonot in the CISA catalog

Public exploitNot knownno public code found

An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled.

CVSS

Base score: 7.1
Version: 4.0
Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.27 %
Percentile among all scored CVEs: 18
Score date: 10/20/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1210 Exploitation of Remote Serviceslateral movement90 %
Primary impactT1499 Endpoint Denial of Serviceimpact85 %

El vector AV:A con PR:N y UI:N indica explotación desde red adyacente (T1210); el texto describe denegación de servicio de rpd mediante un paquete IS-IS SRv6 específico.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

ATT&CK mitigations that cover these techniques

Vulnerability Scanning Threat Intelligence Program Privileged Account Management Network Segmentation Filter Network Traffic Disable or Remove Feature or Program

Affected technologies (2)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Juniper — Junos OS^AI Juniper — Junos OS Evolved^AI

References

Show 1 references

https://supportportal.juniper.net/JSA112187

Raw JSON (NVD)

Show

{
  "id": "CVE-2026-101987",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-101987",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-10-14T20:15:38.635375Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 7.1,
          "Automatable": "NOT_DEFINED",
          "attackVector": "ADJACENT",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "LOW",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "23.2R2-S7.7",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "23.4",
              "lessThan": "23.4R2-S8.13",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "24.2",
              "lessThan": "24.2R2-S5.5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "24.4",
              "lessThan": "24.4R2-S5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "25.2",
              "lessThan": "25.2R2-S2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "25.4",
              "lessThan": "25.4R1-S3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "26.2",
              "lessThan": "26.2R1-S2",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS Evolved",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "23.2R2-S7.7-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "23.4",
              "lessThan": "23.4R2-S8.11-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "24.2",
              "lessThan": "24.2R2-S5.6-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "24.4",
              "lessThan": "24.4R2-S5-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "25.2",
              "lessThan": "25.2R2-S2-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "25.4",
              "lessThan": "25.4R1-S3-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "26.2",
              "lessThan": "26.2R1-S2-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "23.4X100",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "25.2X100",
              "lessThan": "25.2X100-D35-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "25.4X300",
              "lessThan": "25.4X300-D40-EVO",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-10-14T17:17:51.110",
  "references": [
    {
      "url": "https://supportportal.juniper.net/JSA112187",
      "source": "sirt@juniper.net"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled."
    }
  ],
  "lastModified": "2026-10-15T16:23:06.250",
  "sourceIdentifier": "sirt@juniper.net"
}