{"id":"CVE-2026-102054","title":"An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic…","summary":"An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-130"],"published":"2026-10-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T19:17:01.693","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-102054","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net"}],"tags":["nvd"],"ingestedAt":"2026-10-14T17:44:53.659Z","slug":"CVE-2026-102054","body":"## Overview\n\nAn Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}