---
id: CVE-2026-101983
title: >-
  A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper
  Networks Junos OS and Junos OS Evolved allows an unauthenticated network
  attacker to cause remote code execution and denial of service via a J-Web
  virtual-domain…
summary: >-
  A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper
  Networks Junos OS and Junos OS Evolved allows an unauthenticated network
  attacker to cause remote code execution and denial of service via a J-Web
  virtual-domain…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-121
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T21:17:25.103'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-101983'
references:
  - url: 'https://supportportal.juniper.net/JSA112187'
    label: sirt@juniper.net
tags:
  - nvd
ingestedAt: '2026-10-14T18:47:39.305Z'
---

## Overview

A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.