PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-102046 Juniper Networks CVE debrief

CVE-2026-102046 Junos OS denial of service via crafted SCTP network traffic. The vulnerability is caused by a Loop with Unreachable Exit Condition ('Infinite Loop') in netsctp.ko of Juniper Networks Junos OS on MX Series. This allows an unauthenticated network attacker to cause a denial of service via crafted SCTP network traffic. Network defenders and administrators of Juniper Networks Junos OS on MX Series devices should assess exposure and prioritize verification of Junos OS versions and SCTP service exposure to prevent potential disruption of network services.

Vendor
Juniper Networks
Product
Junos OS
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-14
Advisory published
2026-10-14
Advisory updated
2026-10-14

Who should care

Network defenders and administrators of Juniper Networks Junos OS on MX Series devices should assess exposure and prioritize verification of Junos OS versions and SCTP service exposure.

Why it matters

CVE-2026-102046 is a denial of service vulnerability in Junos OS on MX Series devices, allowing an unauthenticated network attacker to cause a denial of service via crafted SCTP network traffic. Network defenders and administrators should assess exposure, verify Junos OS versions, and prioritize patching to prevent potential disruption of network services.

  • Denial of service via crafted SCTP network traffic
  • Potential disruption of network services
  • Need for verification of Junos OS versions and SCTP service exposure
  • Priority for applying vendor-provided patches

Technical summary

A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in netsctp.ko of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to cause a denial of service via crafted SCTP network traffic. The vulnerability can be triggered by sending crafted SCTP packets to the affected device, which can cause the Routing Engine to enter an infinite loop, leading to a denial of service. Network defenders should prioritize verification of Junos OS versions and SCTP service exposure to prevent potential disruption of network services.

Defensive priority

Network defenders should prioritize verification of Junos OS versions and SCTP service exposure

Recommended defensive actions

  • Verify Junos OS versions on MX Series devices
  • Assess exposure to SCTP service
  • Review and apply vendor-provided patches

Evidence notes

The CVE record and source item provide details on the vulnerability in Junos OS on MX Series, allowing an unauthenticated network attacker to cause a denial of service via crafted SCTP network traffic.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-102046 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-102046

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-102046 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-102046

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.