{"id":"CVE-2026-102175","published":"2026-10-14T17:18:05.147","lastModified":"2026-10-16T15:17:01.750","description":"A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via a crafted frame received over the service-deployment TCP connection.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://supportportal.juniper.net/JSA112187","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Juniper's SDX service-deployment daemon allows remote attackers to execute code as root or cause denial of service by sending crafted frames over TCP connections. This vulnerability affects Junos OS and Junos OS Evolved systems.","exploitability":"Exploitation is likely straightforward for attackers who can intercept or control the SDX/SRC server connection, requiring minimal prerequisites beyond network access to the affected service.","blast_radius":"The impact could be severe across networks using Juniper devices with SDX configurations, potentially allowing full system compromise and widespread denial of service if exploited at scale.","remediation":"Disable the SDX service-deployment daemon or restrict access to TCP port 50000 until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","network","juniper","denial-of-service"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:51:00.823Z"}}