CVE-2026-102051: Junos OS 0 to before 23.2R2-S7.7, 23.4 to before 23.4R2-S8.13, 24.2 to before 24.2R2-S5.5, 24.4 to before 24.4R2-S5…

Affected technology

Junos OS · 0 to before 23.2R2-S7.7, 23.4 to before 23.4R2-S8.13, 24.2 to before 24.2R2-S5.5, 24.4 to before 24.4R2-S5, 25.2 to before 25.2R2-S2, 25.4 to before 25.4R1-S3, 26.2 to before 26.2R1-S2
Juniper Networks

Junos OS Evolved · 0 to before 23.2R2-S7.7-EVO, 23.4 to before 23.4R2-S8.11-EVO, 24.2 to before 24.2R2-S5.6-EVO, 24.4 to before 24.4R2-S5-EVO, 25.2 to before 25.2R2-S2-EVO, 25.4 to before 25.4R1-S3-EVO, 26.2 to before 26.2R1-S2-EVO, 23.4X100, 25.2X100 to before 25.2X100-D35-EVO, 25.4X300 to before 25.4X300-D40-EVO
Juniper Networks

Description’s affected range: Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast receive processing is enabled

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

An adjacent unauthenticated attacker can cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast receive processing is enabled. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality and integrity impact as none; availability impact as high.