---
id: CVE-2026-102069
title: >-
  A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper
  Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows
  an adjacent attacker acting as the configured ICCP peer to cause a denial of
  servic…
summary: >-
  A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper
  Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows
  an adjacent attacker acting as the configured ICCP peer to cause a denial of
  servic…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-121
vendor: Juniper Networks
product: Junos OS
affected:
  - junos_os < 23.2R2-S7.7
  - junos_os >= 23.4 < 23.4R2-S8.13
  - junos_os >= 24.2 < 24.2R2-S5.5
  - junos_os >= 24.4 < 24.4R2-S5
  - junos_os >= 25.2 < 25.2R2-S2
  - junos_os >= 25.4 < 25.4R1-S3
  - junos_os >= 26.2 < 26.2R1-S2
published: '2026-10-14'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T16:24:19.073'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-102069'
references:
  - url: 'https://supportportal.juniper.net/JSA112188'
    label: sirt@juniper.net
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-14T20:36:20.341656Z'
ingestedAt: '2026-10-14T17:44:53.664Z'
epss: 0.0035
epssPercentile: 0.2844
---

## Overview

A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is triggered when dot1x synchronization is enabled for the required Fusion satellite topology.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.