Patchfirst
Patchfirst
CVE-2026-102182 Critical · 9.8 EPSS 0.4%

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an…

Juniper Networks · Junos OS

Summary

A stack-based buffer overflow in the kmd component of Juniper Networks Junos OS on MX Series lets a remote attacker trigger code execution as root by sending specially crafted IKE certificate-based packets. The flaw is exploitable without authentication or user interaction over the network, but only when IKE is enabled with an RSA-signature IKE policy.

Official description · NVD

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets. This issue requires IKE to be enabled with an RSA-signature IKE policy to be vulnerable. This issue affects Junos OS on MX Series: * All versions before 21.2R3-S11; * from 21.4 before 21.4R3-S12; * from 22.2 before 22.2R3-S8; * from 22.3 before 22.3R3-S5; * from 22.4 before 22.4R3-S9;

Breakdown
16.1 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Disclosed on 14 Oct 2026. No public exploit code or confirmed exploitation is recorded.

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 8 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

1 link, grouped by NVD tag

Other 1

supportportal.juniper.net/JSA112196
↑ ↓ chooseEnter openEsc close