CVE-2026-102176

Awaiting Analysis Awaiting Analysis - Queue

Buffer Overflow in Juniper Networks Junos OS SDK Service

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Juniper Networks, Inc.

Description

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service and a JDAF routing instance are enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102176

EUVD

EUVD-2026-101392

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This is a buffer overflow vulnerability in Juniper Networks Junos OS SDK service process. An unauthenticated attacker can send specific packets to cause a denial of service or compromise the Routing Engine when the SDK service and JDAF routing instance are enabled.

Detection Guidance

Detection requires checking if the SDK service and JDAF routing instance are enabled on Juniper Junos OS devices. Monitor for unexpected crashes or service disruptions in the SDK process. Inspect network traffic for malformed packets targeting the SDK service. Juniper recommends reviewing logs for anomalies and applying available patches.

Impact Analysis

It can lead to system crashes (denial of service) or allow attackers to take control of the Routing Engine, potentially disrupting network operations or enabling further attacks.

Compliance Impact

This vulnerability could potentially lead to unauthorized access or control of routing infrastructure, which may result in data breaches or service disruptions. Such incidents could violate compliance requirements under GDPR (data protection) or HIPAA (healthcare data security) by exposing sensitive information or disrupting critical services.

Mitigation Strategies

Disable the SDK service and JDAF routing instance if enabled. Update Junos OS to the latest patched version. Monitor network traffic for suspicious packets targeting the SDK service process.

Hi! I’m here to help you understand CVE-2026-102176. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70