CVE-2026-102045: Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled
Published Oct 14, 2026
·Updated
An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of service via a crafted frame received on an LACP-enabled aggregated-Ethernet member port.
Affected Software
1 affected component
Juniper Networks Junos OS Evolved
Event History
Oct 14, 2026
CVE Published
via MITRE·04:52 PM
Data Sourced
via MITRE·04:52 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Which systems are exposed to this issue?
Junos OS Evolved systems are exposed when LACP is enabled on an aggregated-Ethernet member port that can receive frames from a Layer-2-adjacent attacker.
2
What does an attacker need to exploit it?
An attacker must be Layer-2 adjacent to the affected interface and able to send a crafted LACP frame to an LACP-enabled aggregated-Ethernet member port. No privileges or user interaction are required.
3
What is the expected impact of successful exploitation?
Successful exploitation can crash lacpd and cause a denial of service. The provided severity vector indicates no confidentiality or integrity impact.