CVE-2026-102054

No fix known EPSS <1%CVSS 4.3

An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP.

Published 2026-10-14 · CVE record · OSV

Products: Juniper Networks Junos OS, Juniper Networks Junos OS Evolved