CVE-2026-102014
8.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
Attackers controlling or spoofing a configured RADIUS server can crash authd or execute arbitrary code as root on the device. Exploitation requires adjacent network access or the ability to send malicious RADIUS server responses.
Root cause
A stack-based buffer overflow in the authd process when parsing inbound RADIUS responses.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Junos OS to the resolved release specified in Juniper advisory JSA112188. If you cannot patch immediately, restrict RADIUS communication to trusted server IPs using packet filters or disable RADIUS authentication.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADIUS response.