CVE-2026-102054
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured
An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Junos OS
- Vendor
- Juniper Networks
- Product
- Junos OS
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | 23.2R2-S7.7 | Unavailable | None listed |
| 23.4 | affected | custom | 23.4R2-S8.13 | Unavailable | None listed |
| 24.2 | affected | custom | 24.2R2-S5.5 | Unavailable | None listed |
| 24.4 | affected | custom | 24.4R2-S5 | Unavailable | None listed |
| 25.2 | affected | custom | 25.2R2-S2 | Unavailable | None listed |
| 25.4 | affected | custom | 25.4R1-S3 | Unavailable | None listed |
| 26.2 | affected | custom | 26.2R1-S2 | Unavailable | None listed |
Junos OS Evolved
- Vendor
- Juniper Networks
- Product
- Junos OS Evolved
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | 23.2R2-S7.7-EVO | Unavailable | None listed |
| 23.4 | affected | custom | 23.4R2-S8.11-EVO | Unavailable | None listed |
| 24.2 | affected | custom | 24.2R2-S5.6-EVO | Unavailable | None listed |
| 24.4 | affected | custom | 24.4R2-S5-EVO | Unavailable | None listed |
| 25.2 | affected | custom | 25.2R2-S2-EVO | Unavailable | None listed |
| 25.4 | affected | custom | 25.4R1-S3-EVO | Unavailable | None listed |
| 26.2 | affected | custom | 26.2R1-S2-EVO | Unavailable | None listed |
| 23.4X100 | affected | custom | Unavailable | Unavailable | None listed |
| 25.2X100 | affected | custom | 25.2X100-D35-EVO | Unavailable | None listed |
| 25.4X300 | affected | custom | 25.4X300-D40-EVO | Unavailable | None listed |