CVE-2026-102053
Last modified
CVE-2026-102053 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming route processing.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming route processing.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | Junos OS | < 23.2R2-S7.7; >= 23.4, < 23.4R2-S8.13; >= 24.2, < 24.2R2-S5.5; >= 24.4, < 24.4R2-S5; >= 25.2, < 25.2R2-S2; >= 25.4, < 25.4R1-S3; >= 26.2, < 26.2R1-S2 |
| Juniper Networks | Junos OS Evolved | < 23.2R2-S7.7-EVO; >= 23.4, < 23.4R2-S8.11-EVO; >= 24.2, < 24.2R2-S5.6-EVO; >= 24.4, < 24.4R2-S5-EVO; >= 25.2, < 25.2R2-S2-EVO; >= 25.4, < 25.4R1-S3-EVO; >= 26.2, < 26.2R1-S2-EVO; 23.4X100; >= 25.2X100, < 25.2X100-D35-EVO; >= 25.4X300, < 25.4X300-D40-EVO |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-102053?
How severe is CVE-2026-102053?
How do I fix CVE-2026-102053?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-102048An Allocation of Resources Without Limits or Throttling vuln…6.5
- CVE-2026-102049A Stack-based Buffer Overflow vulnerability in the l2cpd pro…8.8
- CVE-2026-10205A security vulnerability has been detected in Metasoft 美特软件 …6.3
- CVE-2026-102050A Stack-based Buffer Overflow vulnerability in the l2cpd dae…8.8
- CVE-2026-102051An Improper Release of Memory Before Removing Last Reference…6.5
- CVE-2026-102052A Stack-based Buffer Overflow vulnerability in the jdhcpd pr…8.8
- CVE-2026-102054An Improper Handling of Length Parameter Inconsistency vulne…4.3
- CVE-2026-102055A Stack-based Buffer Overflow vulnerability in the cfmd proc…8.8
- CVE-2026-102056An Out-of-bounds Read vulnerability in the cfmd process of J…7.1
- CVE-2026-102057A Stack-based Buffer Overflow vulnerability in the jdhcpd pr…7.5
- CVE-2026-102058A Reachable Assertion vulnerability in the bfdd daemon of Ju…6.5
- CVE-2026-102059An Improper Neutralization of Special Elements used in an OS…8.8
Are you affected by CVE-2026-102053?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST