CVE-2026-101927
7.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-122
Impact
A local attacker with low-privilege access can crash the eventd service or gain root privileges. They need local shell or IPC access to send malformed event messages to the daemon.
Root cause
A heap-based buffer overflow in the eventd daemon triggered when processing crafted IPC event messages.
Affected systems
Juniper Networks Junos OS and Junos OS Evolved on all platforms (specific release numbers not listed in advisory data — check JSA112187).
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to the patched Junos OS / Junos OS Evolved releases specified in Juniper advisory JSA112187. As an interim workaround, restrict local CLI and shell access to fully trusted administrators.
$ show versionAI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved on all platforms allows an unprivileged local attacker to cause a denial of service (DoS) or achieve privilege escalation to root via crafted IPC event messages.