CVE-2026-102014: Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used

Published Oct 14, 2026

Updated

A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADIUS response.

Affected Software

1 affected component

Juniper Networks Junos OS

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 23.2R2-S7.7
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 23.4R2-S8.13
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 24.2R2-S5.5
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 24.4R2-S5
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 25.2R2-S2
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 25.4R1-S3
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 25.4R2
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 26.2R1-S2
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 26.2R2
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 26.4R1

Event History

Oct 14, 2026

CVE Published

via MITRE·04:45 PM

Data Sourced

via MITRE·04:45 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Junos OS deployments that use subscriber RADIUS authentication are exposed when an attacker can influence the configured RADIUS server or its responses.

What does an attacker need to exploit it?

The attacker must be able to influence a configured RADIUS server and provide a malicious RADIUS response. No authentication or user interaction is required according to the supplied CVSS vector.

What is the potential impact of successful exploitation?

A malicious RADIUS response can crash the authd process or lead to code execution with root privileges.