CVE-2026-102176
8.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-120
Impact
Adjacent unauthenticated attackers can crash the Routing Engine or execute arbitrary code to fully compromise the device. They only need network reachability to the target when the SDK service and a JDAF routing instance are enabled.
Root cause
A classic buffer overflow exists in the SDK service process due to copying input without checking boundaries.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Junos OS to the resolved release specified in advisory JSA112188. If immediate patching is not possible, disable the SDK service or remove the JDAF routing instance configuration.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service and a JDAF routing instance are enabled.