---
id: CVE-2026-102182
title: >-
  A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper
  Networks Junos OS on MX Series allows an unauthenticated network attacker to
  execute code as root via specific IKE certificate-based packets.


  This issue affects…
summary: >-
  A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper
  Networks Junos OS on MX Series allows an unauthenticated network attacker to
  execute code as root via specific IKE certificate-based packets.


  This issue affects…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-121
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:17:03.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-102182'
references:
  - url: 'https://supportportal.juniper.net/JSA112196'
    label: sirt@juniper.net
tags:
  - nvd
ingestedAt: '2026-10-14T17:44:53.670Z'
---

## Overview

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets.

This issue affects Junos OS on MX Series:


  *  All versions before 21.2R3-S11;
  *  from 21.4 before 21.4R3-S12;
  *  from 22.2 before 22.2R3-S8;
  *  from 22.3 before 22.3R3-S5;
  *  from 22.4 before 22.4R3-S9;

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.