{"id":"CVE-2026-102069","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-102069","generatedAt":"2026-10-28T01:02:25.395Z","title":"A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and…","description":"A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is triggered when dot1x synchronization is enabled for the required Fusion satellite topology.","published":"2026-10-14T17:18:03.000Z","lastModified":"2026-10-15T16:24:19.000Z","status":"Awaiting Analysis","sourceIdentifier":"sirt@juniper.net","cvss":{"version":"4.0","score":8.7,"severity":"HIGH","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-121"],"affected":[],"epss":{"score":0.0035,"percentile":0.28375,"date":"2026-10-26","history":[{"date":"2026-10-15","score":0.00349,"percentile":0.26916}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-14T17:18:03.000Z","detail":{"score":"8.7","severity":"HIGH","publishedAt":"2026-10-14T17:18:02.800Z"},"summary":"New CVE, high severity (CVSS 8.7)."}],"references":[{"url":"https://supportportal.juniper.net/JSA112188","source":"sirt@juniper.net"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-102069","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}