CVE-2026-102055
8.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
An unauthenticated adjacent-network attacker can execute arbitrary code as root or crash the device by sending a crafted CFM packet. They need layer 2 or adjacent network access to an interface configured with a CFM down-MEP running enhanced CFM mode.
Root cause
A stack-based buffer overflow in the cfmd process triggered when handling specific CFM messages on a configured down-MEP with enhanced CFM mode enabled.
Affected systems
Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series (exact version numbers not listed in advisory — check vendor advisory JSA112187).
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to the patched Junos OS/Junos OS Evolved release specified in Juniper advisory JSA112187. If you cannot patch immediately, disable enhanced CFM mode or remove down-MEP configurations on affected interfaces.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or cause denial of service via a specific CFM Message sent to a configured down-MEP with enhanced CFM mode enabled.