Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-101987 EUVD-2026-101483GHSA-286m-f46f-v69m

Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used

Published Oct 14, 2026 · Updated Oct 29, 2026 · Assigned by juniper

Vendor: Juniper Networks Product: Junos OS Product: Junos OS Evolved Category: Network devices

Description

An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2 23.2R2-S7.7
Juniper Networks Junos OS Evolved < 23.2R2-S7.7-EVO, 23.4 – < 23.4R2-S8.11-EVO, 24.2 – < 24.2R2-S5.6-EVO, 24.4 – < 24.4R2-S5-EVO, 25.2 – < 25.2R2-S2-EVO, 25.4 – < 25.4R1-S3-EVO, 26.2 – < 26.2R1-S2-EVO, 23.4X100, 25.2X100 – < 25.2X100-D35-EVO, 25.4X300 – < 25.4X300-D40-EVO 23.2R2-S7.7-EVO

References