CVE-2026-102175: CWE-122 Heap-based Buffer Overflow in Juniper Networks Junos OS

This vulnerability (CVE-2026-102175) is a heap-based buffer overflow in the sdxd service-deployment daemon component of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated remote attacker capable of controlling or intercepting the SDX/SRC server connection can exploit this flaw by sending a crafted frame over the service-deployment TCP connection. Successful exploitation can lead to arbitrary code execution with root privileges or cause a denial of service. The vulnerability affects multiple specific versions of Junos OS and Junos OS Evolved, including various release branches and subversions as enumerated. The CVSS 3.1 base score is 9.8, reflecting high impact on confidentiality, integrity, and availability.

An attacker who can control or intercept the SDX/SRC server connection to the vulnerable sdxd daemon can execute arbitrary code with root privileges or cause a denial of service. This compromises system confidentiality, integrity, and availability. The vulnerability is remotely exploitable without authentication, increasing risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor Juniper Networks advisories for updates and apply patches or mitigations as soon as they become available.