CVE-2026-101938: CWE-191 Integer Underflow (Wrap or Wraparound) in Juniper Networks Junos OS

This vulnerability is an integer underflow (wrap or wraparound) in the srxpfe component of Juniper Networks Junos OS and Junos OS Evolved on SRX Series devices. An adjacent attacker without authentication can exploit this by sending a specially crafted ICMP message associated with an SVR carrier session, resulting in a forwarding-plane denial of service. The CVSS 3.1 vector indicates the attack requires adjacent network access, has low complexity, no privileges or user interaction, and impacts availability only.

Successful exploitation results in denial of service on the forwarding plane of affected Junos OS SRX Series devices, disrupting network traffic forwarding. There is no impact on confidentiality or integrity. The attack can be performed by an adjacent unauthenticated attacker.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, network administrators should consider limiting adjacent network access to trusted entities and monitor for unusual ICMP traffic related to SVR carrier sessions.