CVE-2026-101979: Juniper Networks Junos OS

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a denial of service via a specific SNMP packet, when SNMP and AAA are enabled.

Affected products

• Juniper Networks Junos OS: before 23.2R2-S7.7 (fixed in 23.2R2-S7.7); from 23.4, before 23.4R2-S8.13 (fixed in 23.4R2-S8.13); from 24.2, before 24.2R2-S5.5 (fixed in 24.2R2-S5.5); from 24.4, before 24.4R2-S5 (fixed in 24.4R2-S5); from 25.2, before 25.2R2-S2 (fixed in 25.2R2-S2); from 25.4, before 25.4R1-S3 (fixed in 25.4R1-S3); …
• Juniper Networks Junos OS Evolved: before 23.2R2-S7.7-EVO (fixed in 23.2R2-S7.7-EVO); from 23.4, before 23.4R2-S8.11-EVO (fixed in 23.4R2-S8.11-EVO); from 24.2, before 24.2R2-S5.6-EVO (fixed in 24.2R2-S5.6-EVO); from 24.4, before 24.4R2-S5-EVO (fixed in 24.4R2-S5-EVO); from 25.2, before 25.2R2-S2-EVO (fixed in 25.2R2-S2-EVO); from 25.4, before 25.4R1-S3-EVO (fixed in 25.4R1-S3-EVO); …

Published 2026-10-14. Last modified 2026-10-15.