Skip to content
Connect AISign inSign up free
CVE-2026-219137.5HighCWE-1419

CVE-2026-21913: Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart

Juniper Networks · Junos OS

Vendor fix available · Affected: Juniper Networks Junos OS · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.4%probability of exploitation in the next 30 days
35th percentile
050100

Higher than 35% of scored CVEs

7.5HighCVSS 3.1
LowHigh

DescriptionCVE.org

An Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of Juniper Networks Junos OS on EX4000 models allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On EX4000 models with 48 ports (EX4000-48T, EX4000-48P, EX4000-48MP) a high volume of traffic destined to the device will cause an FXPC crash and restart, which leads to a complete service outage until the device has automatically restarted. The following reboot reason can be seen in the output of 'show chassis routing-engine' and as a log message: reason=0x4000002 reason_string=0x4000002:watchdog + panic with core dump This issue affects Junos OS on EX4000-48T, EX4000-48P and EX4000-48MP: * 24.4 versions before 24.4R2, * 25.2 versions before 25.2R1-S2, 25.2R2. This issue does not affect versions before 24.4R1 as the first Junos OS version for the EX4000 models was 24.4R1.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Juniper Networks · Junos OSfrom 24.4 before 24.4R2; from 25.2 before 25.2R1-S2, 25.2R2

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Published
January 2026

CoverageNo articles yet

No CyberSIXT article names CVE-2026-21913 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References