What is GHSA-cfqf-pw39-4rx2?

GHSA-cfqf-pw39-4rx2 is a security advisory published by GitHub Security Advisories with High severity. An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of...

Which CVE IDs does GHSA-cfqf-pw39-4rx2 cover?

GHSA-cfqf-pw39-4rx2 covers the following CVE IDs: CVE-2026-102048. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cfqf-pw39-4rx2?

GHSA-cfqf-pw39-4rx2 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-cfqf-pw39-4rx2HighCVSS 6.5

An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of...

Vendor

GitHub Security Advisories

Published

October 14, 2026

Last Modified

October 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-102048 →

📋 Description

An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a denial of service and l2cpd restart via FNP-enabled Layer 2 interfaces. The issue is triggered when the FNP feature is enabled on a VPLS routing instance with VLAN-VPLS encapsulation enabled.

This issue affects all platforms except the PTX Series and SRX Series.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-102048
https://supportportal.juniper.net/JSA112188
https://github.com/advisories/GHSA-cfqf-pw39-4rx2