CVE-2026-102182

Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in Juniper Networks Junos OS MX Series

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Juniper Networks, Inc.

Description

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets. This issue affects Junos OS on MX Series: * All versions before 21.2R3-S11; * from 21.4 before 21.4R3-S12; * from 22.2 before 22.2R3-S8; * from 22.3 before 22.3R3-S5; * from 22.4 before 22.4R3-S9;

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102182

EUVD

EUVD-2026-101397

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series. An unauthenticated network attacker can exploit it by sending specific IKE certificate-based packets, allowing them to execute code with root privileges.

Detection Guidance

Detecting this vulnerability requires monitoring for unusual IKE certificate-based packet activity targeting MX Series devices. Check Juniper device logs for malformed IKE packets or crashes in the kmd component. Use packet capture tools like tcpdump or Wireshark to inspect IKE traffic for anomalies. Ensure Junos OS versions are updated to patched releases.

Impact Analysis

An attacker could gain full control over affected Juniper MX Series devices, leading to unauthorized access, data theft, or disruption of network services. This could compromise the confidentiality, integrity, and availability of the system.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating compliance requirements such as GDPR or HIPAA. Organizations may face legal penalties, reputational damage, and loss of trust due to compromised data.

Mitigation Strategies

Upgrade Junos OS on affected MX Series devices to versions 21.2R3-S11, 21.4R3-S12, 22.2R3-S8, 22.3R3-S5, or 22.4R3-S9 or later to address the stack-based buffer overflow in the kmd component.

Hi! I’m here to help you understand CVE-2026-102182. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70