CVE-2026-102048: Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled

Published Oct 14, 2026

Updated

An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a denial of service and l2cpd restart via FNP-enabled Layer 2 interfaces. The issue is triggered when the FNP feature is enabled on a VPLS routing instance with VLAN-VPLS encapsulation enabled.

This issue affects all platforms except the PTX Series and SRX Series.

Affected Software

1 affected component

Juniper Networks Junos OS

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 23.2R2-S7.7
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 23.4R2-S8.13
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 24.2R2-S5.5
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 24.4R2-S5
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 25.2R2-S2
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 25.4R1-S3
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 25.4R2
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 26.2R1-S2
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 26.2R2
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 26.4R1

Event History

Oct 14, 2026

CVE Published

via MITRE·04:53 PM

Data Sourced

via MITRE·04:53 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Affected deployments use Junos OS on a platform other than PTX Series or SRX Series, with FNP enabled on a VPLS routing instance that has VLAN-VPLS encapsulation enabled. Systems without that feature combination are not described as affected.

What access does an attacker need to trigger the denial of service?

The attacker must be adjacent to the affected device and does not need authentication or user interaction. Successful exploitation can crash and restart the l2cpd process.

What is the operational impact of exploitation?

The described impact is denial of service through an l2cpd crash and restart. No confidentiality or integrity impact is specified.