Out-of-bounds Write Vulnerability in Junos OS Evolved by Juniper Networks
CVE-2026-102045

7.1HIGH

Key Information:

Vendor

Juniper Networks
Status
Junos Os Evolved
Vendor
CVE Published:
14 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-102045?

An out-of-bounds write vulnerability has been identified in the lacpd component of Juniper Networks' Junos OS Evolved. This flaw allows a Layer-2-adjacent attacker to exploit a crafted frame sent to a LACP-enabled aggregated-Ethernet member port, potentially leading to a denial-of-service condition. Due to this vulnerability, the stability and availability of the affected system may be compromised, requiring immediate attention to ensure network security.

Affected Version(s)

Junos OS Evolved 24.4 < 24.4R2-S5-EVO

Junos OS Evolved 25.2 < 25.2R2-S2-EVO

Junos OS Evolved 25.4 < 25.4R1-S3-EVO

References

https://supportportal.juniper.net/JSA112250
vendor-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.