Stack-based Buffer Overflow in Junos OS on MX and PTX Series by Juniper Networks
CVE-2026-102055

8.7HIGH

Key Information:

Vendor

Juniper Networks
Status
Junos Os
Junos Os Evolved
Vendor
CVE Published:
14 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-102055?

A stack-based buffer overflow vulnerability exists in the cfmd process of Juniper Networks' Junos OS deployed on MX Series and Junos OS Evolved on PTX Series platforms. This flaw allows unauthenticated adjacent-network attackers to execute arbitrary code with root privileges or trigger a denial-of-service condition by sending a specially crafted CFM message to a configured down-MEP where enhanced CFM mode is enabled. Proper configuration and prompt patching are essential to mitigate potential exploits stemming from this vulnerability.

Affected Version(s)

Junos OS Evolved PTX Series 0 < 23.2R2-S7.7-EVO

Junos OS Evolved PTX Series 23.4 < 23.4R2-S8.11-EVO

Junos OS Evolved PTX Series 24.2 < 24.2R2-S5.6-EVO

References

https://supportportal.juniper.net/JSA112187
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.