CVE-2026-102068: Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used

Published Oct 14, 2026

Updated

A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP.

Affected Software

1 affected component

Juniper Networks Junos OS Evolved

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Junos OS Evolved to a version that resolves this vulnerability.
Fixed in 23.2R2-S7.7-EVO

Event History

Oct 14, 2026

CVE Published

via MITRE·04:14 PM

Data Sourced

via MITRE·04:14 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Junos OS Evolved deployments using key-chain authentication for BGP or LDP are exposed. The issue is in the kernel and can be triggered by crafted TCP traffic.

Does exploitation require authentication or user interaction?

No. The vulnerability is reachable by an unauthenticated remote attacker, and no user interaction is required.

What is the expected impact of a successful attack?

A successful attack can cause a kernel panic, resulting in a denial of service. The provided data does not indicate confidentiality or integrity impact.