{"id":"CVE-2026-101983","published":"2026-10-14T18:17:13.293","lastModified":"2026-10-15T16:24:19.073","description":"A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://supportportal.juniper.net/JSA112187","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Juniper's httpd process allows unauthenticated remote code execution and denial of service when J-Web virtual domains are configured. This critical vulnerability can be exploited by any network attacker without authentication.","exploitability":"Exploitation is likely straightforward with no special preconditions, as the vulnerability affects an unauthenticated network service with a predictable buffer overflow pattern.","blast_radius":"The impact could be severe across all Juniper devices running Junos OS or Junos OS Evolved with J-Web virtual domains configured, potentially allowing full system compromise and service disruption.","remediation":"Disable J-Web virtual domain configuration immediately or upgrade to the latest available version that fixes this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","buffer-overflow","remote"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:52:32.827Z"}}