CVE-2026-102023: CWE-617 Reachable Assertion in Juniper Networks Junos OS Evolved
Description
CVE-2026-102023 is a reachable assertion vulnerability in the fwstatsd component of Juniper Networks Junos OS Evolved. It allows an authenticated network attacker to cause a denial of service by sending an SNMP firewall-counter MIB query when at least one firewall counter is configured. The vulnerability has a high severity with a CVSS score of 7.5. Multiple versions of Junos OS Evolved are affected, as specified. There is no explicit patch information provided in the input data.
CVSS v3.1
Score 7.5high
Affected software
Juniper Networks
Junos OS Evolved
pkg:rpm/juniper/junos-os-evolvedRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-102023) involves a reachable assertion flaw in the fwstatsd daemon of Juniper Networks Junos OS Evolved. An authenticated attacker can exploit this by issuing an SNMP firewall-counter MIB query under conditions where firewall counters are configured, leading to a denial of service. The flaw is categorized under CWE-617 (Reachable Assertion). The CVSS v3.1 score is 7.5, indicating a high severity denial of service impact without confidentiality or integrity effects. The affected versions span multiple release intervals of Junos OS Evolved as detailed in the affectedVersions field.
Potential Impact
Successful exploitation results in a denial of service condition on the affected device, impacting availability. There is no impact on confidentiality or integrity. The attacker must be authenticated on the network to trigger the vulnerability via SNMP queries targeting firewall counters.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Juniper Networks advisories for updates. In the meantime, restricting SNMP access to trusted administrators and limiting firewall counter configurations where possible may reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- juniper
- Date Reserved
- 2026-09-28T17:33:49.410Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acfb6742cdf04f656979519
Added to database: 10/14/2026, 17:05:56 UTC
Last enriched: 10/14/2026, 17:19:11 UTC
Last updated: 10/14/2026, 19:00:32 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.