CVE-2026-102182: CWE-121 Stack-based Buffer Overflow in Juniper Networks Junos OS

This vulnerability is a stack-based buffer overflow in the kmd component of Juniper Networks Junos OS running on MX Series devices. An unauthenticated attacker can exploit this flaw by sending crafted IKE certificate-based packets, leading to remote code execution with root privileges. The affected versions include all releases before 21.2R3-S11, versions from 21.4 up to but not including 21.4R3-S12, from 22.2 up to 22.2R3-S8, from 22.3 up to 22.3R3-S5, and from 22.4 up to 22.4R3-S9, as well as other specified ranges up to 26.2R1-S2. The CVSS 3.1 base score is 9.8, reflecting the critical nature of this vulnerability with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an unauthenticated remote attacker to execute arbitrary code with root privileges on affected Junos OS MX Series devices. This can lead to full system compromise, including complete loss of confidentiality, integrity, and availability of the device.

Fixes are available in Juniper Networks Junos OS releases 21.2R3-S11 and later, 21.4R3-S12 and later, 22.2R3-S8 and later, 22.3R3-S5 and later, 22.4R3-S9 and later, and corresponding subsequent releases as indicated by the affected version ranges. Users should upgrade to these fixed versions to remediate the vulnerability. Patch status is confirmed by the affected version ranges indicating fixed versions. No vendor advisory content was provided to contradict this; therefore, upgrading to the fixed releases is the recommended mitigation.