---
id: CVE-2026-101938
title: >-
  An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of
  Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an
  adjacent unauthenticated attacker to cause a forwarding-plane denial of
  service via an IC…
summary: >-
  An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of
  Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an
  adjacent unauthenticated attacker to cause a forwarding-plane denial of
  service via an IC…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-191
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T17:17:46.233'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-101938'
references:
  - url: 'https://supportportal.juniper.net/JSA112186'
    label: sirt@juniper.net
tags:
  - nvd
ingestedAt: '2026-10-14T17:44:53.627Z'
---

## Overview

An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.