CVE-2026-102182: Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution
A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets.
This issue affects Junos OS on MX Series:
All versions before 21.2R3-S11; from 21.4 before 21.4R3-S12; from 22.2 before 22.2R3-S8; from 22.3 before 22.3R3-S5; from 22.4 before 22.4R3-S9;
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 21.2R3-S11 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 21.4R3-S12 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 22.2R3-S8 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 22.3R3-S5 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 22.4R3-S9 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 23.2R2-S7.7 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 23.4R2-S8.13 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 24.2R2-S5.5 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 24.4R2-S5 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 25.2R2-S2 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 25.4R1-S3 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 25.4R2 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 26.2R1-S2 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 26.2R2 - Upgrade
Upgrade
Juniper Networks Junos OS on MX Seriesto a version that resolves this vulnerability.Fixed in 26.4R1
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Juniper Networks Junos OS running on MX Series devices is affected in versions before 21.2R3-S11, 21.4R3-S12, 22.2R3-S8, 22.3R3-S5, and 22.4R3-S9 within their respective release trains.
Does exploitation require authentication or user interaction?
No. An unauthenticated network attacker can exploit the issue by sending specific certificate-based IKE packets, and no user interaction is required.
What level of access can an attacker obtain?
Successful exploitation allows execution of code as root, with high impact to confidentiality, integrity, and availability.