CVE-2026-0203

An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS allows an unauthenticated, network-adjacent attacker sending a specifically malformed ICMP packet to cause an FPC to crash and restart, resulting in a Denial of Service (DoS). When an ICMP packet is received with a specifically malformed IP header value, the FPC receiving the packet crashes and restarts. Due to the specific type of malformed packet, adjacent upstream routers would not forward the packet, limiting the attack surface to adjacent networks. This issue only affects ICMPv4. ICMPv6 is not vulnerable to this issue. This issue does not affect AFT-based line cards such as the MPC10, MPC11, LC4800, LC9600, and MX304. This issue affects Junos OS:  * all versions before 21.2R3-S9,  * from 21.4 before 21.4R3-S10,  * from 22.2 before 22.2R3-S7,  * from 22.3 before 22.3R3-S4,  * from 22.4 before 22.4R3-S5,  * from 23.2 before 23.2R2-S3,  * from 23.4 before 23.4R2-S3,  * from 24.2 before 24.2R1-S2, 24.2R2.

• CWE-755

• https://kb.juniper.net/JSA104294Vendor Advisory
• https://supportportal.juniper.net/JSA104294Vendor Advisory

Published

Jan 15, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-0160In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDe…8.8
• CVE-2026-0161In numberOfReportBlocks of RtpSession.cpp, there is a possib…8.8
• CVE-2026-0162In ParsePayloads of AudioSdpParser.cpp, there is a possible …8.8
• CVE-2026-0163In multiple functions of vpu_ioctl.c, there is a possible us…9.8
• CVE-2026-0164In Modem, there is a possible out of bounds write due to a m…8.8
• CVE-2026-0165In several functions of the RTCP packet decoder, there is a …5.7
• CVE-2026-0204A vulnerability in the access control mechanism of SonicOS m…8
• CVE-2026-0205A post-authentication Path Traversal vulnerability in SonicO…6.8
• CVE-2026-0206A post-authentication Stack-based Buffer Overflow vulnerabil…4.9
• CVE-2026-0207A vulnerability exists in FlashBlade whereby sensitive infor…8.5
• CVE-2026-0209Under certain administrative conditions, FlashArray Purity m…6.9
• CVE-2026-0227A vulnerability in Palo Alto Networks PAN-OS software enable…7.5