CVE-2026-102175

Summary

A heap-based buffer overflow in Juniper's SDX service-deployment daemon allows remote attackers to execute code as root or cause denial of service by sending crafted frames over TCP connections. This vulnerability affects Junos OS and Junos OS Evolved systems.

Exploitability

Exploitation is likely straightforward for attackers who can intercept or control the SDX/SRC server connection, requiring minimal prerequisites beyond network access to the affected service.

Blast radius

The impact could be severe across networks using Juniper devices with SDX configurations, potentially allowing full system compromise and widespread denial of service if exploited at scale.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the SDX service-deployment daemon or restrict access to TCP port 50000 until a patch is available.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.