PatchSiren cyber security CVE debrief
CVE-2026-102023 Juniper Networks CVE debrief
An authenticated network attacker can cause a denial of service via SNMP firewall-counter MIB query when at least one firewall counter is configured in Junos OS Evolved. This vulnerability, identified as CVE-2026-102023, affects Junos OS Evolved and allows an attacker to exploit a Reachable Assertion vulnerability in fwstatsd. The vulnerability can lead to a denial of service via SNMP. Network defenders and administrators responsible for Junos OS Evolved installations should assess exposure and prioritize verification and updates to prevent potential denial-of-service attacks. The CVE record and source item provide details on the vulnerability, including the affected versions and a
- Vendor
- Juniper Networks
- Product
- Junos OS Evolved
- CVSS
- HIGH 7.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-10-14
- Original CVE updated
- 2026-10-16
- Advisory published
- 2026-10-14
- Advisory updated
- 2026-10-16
Who should care
Network defenders and administrators responsible for Junos OS Evolved installations should assess exposure and prioritize verification and updates to prevent potential denial-of-service attacks.
Why it matters
CVE-2026-102023 is a high-severity vulnerability in Junos OS Evolved that can cause denial of service via SNMP. Network defenders and administrators should prioritize verification and updates to prevent potential attacks.
- Denial of service via SNMP firewall-counter MIB query
- Potential disruption of network operations
- Need for verification and updates to Junos OS Evolved installations
- Possible impact on network security and stability
Technical summary
A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a denial of service via an SNMP firewall-counter MIB query when at least one firewall counter is configured. The vulnerability is identified as CVE-2026-102023 and affects Junos OS Evolved. An attacker can exploit this vulnerability to cause a denial of service. Network defenders should prioritize verifying and updating Junos OS Evolved installations to prevent potential denial-of-service attacks via SNMP. The vulnerability has a
Defensive priority
Network defenders should prioritize verifying and updating Junos OS Evolved installations to prevent potential denial-of-service attacks via SNMP.
Recommended defensive actions
- Verify and update Junos OS Evolved installations to the latest version
- Review and limit SNMP access to firewall-counter MIB queries
- Monitor for potential denial-of-service attacks via SNMP
Evidence notes
The CVE record and source item provide details on the vulnerability in Junos OS Evolved, including the affected versions and a reference to a vendor advisory.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-102023 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-102023
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-102023 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-102023
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used
Unverified legacy reference
URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102023.json
cve_program_cvelist_v5
-
Source reference
Unverified legacy reference
URL: https://supportportal.juniper.net/JSA112250
Supplemental source - vendor-advisory
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.