CVE-2026-102174: Juniper Networks Junos OS

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with root privileges or cause denial of service via the remote-access VPN authentication and JIMS identity-publishing path.

Affected products

• Juniper Networks Junos OS: before 23.2R2-S7.7 (fixed in 23.2R2-S7.7); from 23.4, before 23.4R2-S8.13 (fixed in 23.4R2-S8.13); from 24.2, before 24.2R2-S5.5 (fixed in 24.2R2-S5.5); from 24.4, before 24.4R2-S5 (fixed in 24.4R2-S5); from 25.2, before 25.2R2-S2 (fixed in 25.2R2-S2); from 25.4, before 25.4R1-S3 (fixed in 25.4R1-S3); …

Published 2026-10-14. Last modified 2026-10-16.