CVE-2026-102068

Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in Juniper Junos OS Evolved Kernel

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102068

EUVD

EUVD-2026-101429

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a stack-based buffer overflow in the kernel of Juniper Networks Junos OS Evolved. It allows an unauthenticated remote attacker to cause a kernel panic by sending a specially crafted TCP packet when key-chain authentication is enabled for BGP or LDP protocols.

Detection Guidance

Detection requires monitoring for kernel panics or crashes in Junos OS Evolved systems using key-chain authentication for BGP or LDP. Check system logs for unexpected reboots or kernel errors. Juniper may provide specific diagnostic commands in their security advisories.

Impact Analysis

An attacker could exploit this to crash the system, leading to denial of service. This disrupts network operations, potentially causing outages for services relying on BGP or LDP protocols.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling unauthorized remote attacks that trigger kernel panics, potentially disrupting critical network services. Unauthorized access or service disruption may violate data integrity and availability requirements under these regulations.

Mitigation Strategies

Apply the latest security patches from Juniper Networks to address the stack-based buffer overflow in Junos OS Evolved kernel. Disable key-chain authentication for BGP or LDP if not required. Monitor network traffic for crafted TCP packets targeting BGP or LDP.

Hi! I’m here to help you understand CVE-2026-102068. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70