CVE-2026-103994: CWE-122 Heap-based Buffer Overflow in Juniper Networks Junos OS

This vulnerability is a heap-based buffer overflow (CWE-122) in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS. Exploitation by a malicious or compromised SDN-controller can disrupt the OVSDB control plane entirely and potentially enable remote code execution. The vulnerability is present in multiple Junos OS versions before certain patch releases, as detailed in the affected versions list. The CVSS v3.1 score is 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability.

Successful exploitation can cause a complete outage of the OVSDB control plane, disrupting network operations managed by Junos OS. Additionally, it may allow remote code execution, which could lead to full system compromise. The vulnerability affects confidentiality, integrity, and availability of the affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor Juniper Networks advisories for updates and apply patches promptly once available.