CVE-2026-21910
Gravedad CVSS v4.0:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
15/01/2026
Última modificación:
15/01/2026
Descripción
*** Pendiente de traducción *** An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on EX4k Series and QFX5k Series platforms allows an unauthenticated network-adjacent attacker flapping an interface to cause traffic between VXLAN Network Identifiers (VNIs) to drop, leading to a Denial of Service (DoS).<br />
<br />
On all EX4k and QFX5k platforms, a link flap in an<br />
<br />
EVPN-VXLAN configuration Link Aggregation Group (LAG)<br />
results in Inter-VNI traffic dropping when there are multiple load-balanced next-hop routes for the same destination.<br />
<br />
This issue is only applicable to systems that support EVPN-VXLAN Virtual Port-Link Aggregation Groups (VPLAG), such as the QFX5110, QFX5120, QFX5200, EX4100, EX4300, EX4400, and EX4650.<br />
<br />
Service can only be restored by restarting the affected FPC via the &#39;request chassis fpc restart slot &#39; command.<br />
<br />
This issue affects Junos OS <br />
<br />
on EX4k and QFX5k Series: <br />
<br />
<br />
<br />
* all versions before 21.4R3-S12, <br />
* all versions of 22.2<br />
* from 22.4 before 22.4R3-S8, <br />
* from 23.2 before 23.2R2-S5, <br />
* from 23.4 before 23.4R2-S5, <br />
* from 24.2 before 24.2R2-S3,<br />
* from 24.4 before 24.4R2.
Impacto
Puntuación base 4.0
7.10
Gravedad 4.0
ALTA
Puntuación base 3.x
6.50
Gravedad 3.x
MEDIA