CVE-2026-102068: CWE-121 Stack-based Buffer Overflow in Juniper Networks Junos OS Evolved

This vulnerability (CWE-121) exists in the kernel of Juniper Networks Junos OS Evolved and can be triggered remotely without authentication. An attacker can send a crafted TCP packet that causes a stack-based buffer overflow, resulting in a kernel panic. The issue specifically arises when key-chain authentication is used for BGP or LDP protocols. The CVSS 3.1 base score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (kernel panic).

Successful exploitation results in a denial of service via kernel panic, causing system instability or downtime. There is no indication of confidentiality or integrity impact. The vulnerability can be triggered remotely without authentication, increasing the risk of disruption to network operations relying on affected Junos OS Evolved versions with key-chain authentication enabled for BGP or LDP.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling key-chain authentication for BGP or LDP if feasible or applying network-level protections to block crafted TCP packets targeting this vulnerability. Monitor Juniper Networks advisories for updates and patches addressing this issue.