CVE-2026-102015: CWE-122 Heap-based Buffer Overflow in Juniper Networks Junos OS

This vulnerability (CVE-2026-102015) involves a heap-based buffer overflow in the secure-dot1xd process on Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated attacker on an adjacent network can exploit this by sending a malicious EAPOL frame to an 802.1X-authenticated interface, potentially leading to remote code execution with root privileges or denial of service. The flaw affects a broad range of versions across multiple Junos OS releases, including both standard and evolved variants. The CVSS 3.1 vector indicates the attack requires adjacent network access, no privileges or user interaction, and impacts confidentiality, integrity, and availability with high severity.

Successful exploitation allows an unauthenticated attacker on an adjacent network to execute arbitrary code as root or cause a denial of service on affected Junos OS devices. This compromises system confidentiality, integrity, and availability, potentially leading to full system compromise or service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix links were provided in the input data. Users should monitor Juniper Networks advisories for updates and apply patches once available. Until then, consider network-level controls to restrict access to 802.1X-authenticated interfaces from untrusted adjacent networks.