CVE-2026-103994
8.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-122
Impact
A compromised or malicious SDN controller can crash the OVSDB control plane or execute remote code on the device. An attacker needs adjacent network access communicating as an SDN controller to the VXLAN gateway daemon.
Root cause
A heap-based buffer overflow flaw in the Junos OS VXLAN Gateway Daemon (vgd).
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Junos OS to the fixed release specified in Juniper advisory JSA112188; as an interim mitigation, restrict network access to the OVSDB/vgd service to trusted SDN controller IPs only.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution.