---
id: CVE-2026-102052
title: >-
  A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper
  Networks Junos OS and Junos OS Evolved platforms allows an adjacent
  unauthenticated attacker to cause denial of service or execute arbitrary code
  with root priv…
summary: >-
  A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper
  Networks Junos OS and Junos OS Evolved platforms allows an adjacent
  unauthenticated attacker to cause denial of service or execute arbitrary code
  with root priv…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-121
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T17:18:00.113'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-102052'
references:
  - url: 'https://supportportal.juniper.net/JSA112187'
    label: sirt@juniper.net
tags:
  - nvd
ingestedAt: '2026-10-14T17:44:53.658Z'
---

## Overview

A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary code with root privileges via a malformed DHCPv4 server response when the DHCPv4 local-client feature is used.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.