EXPOSURES › CVE-2026-102175
CVE-2026-102175
CRITICALA heap-based buffer overflow in Juniper's sdxd service-deployment daemon allows remote unauthenticated attackers to execute code as root or cause denial of service.
This critical vulnerability (CVE-2026-102175) in Juniper Networks Junos OS and Junos OS Evolved enables remote code execution as root via a crafted frame over the service-deployment TCP connection. DIB organizations must patch this immediately as it represents a severe exposure to supply-chain and network infrastructure, with compliance implications for systems relying on Juniper networking gear. The failure is avoidable through timely patching and highlights the risk of unpatched critical flaws in widely deployed network operating systems.
Shame score — A critical CVSS 9.8 heap-based buffer overflow allowing remote code execution as root in a widely deployed network OS is a severe, avoidable failure that shreds reputation and exposes critical infrastructure to unauthenticated attackers.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via a crafted frame received over the service-deployment TCP connection.