← CVE Intelligence

CVE-2026-103994

Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution PUBLISHED

Description (CNA)

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution.

Affected (CNA)

Vendor / productVersions
Juniper Networks / Junos OSaffected 0 before 23.2R2-S7.7; affected 23.4 before 23.4R2-S8.13; affected 24.2 before 24.2R2-S5.5; affected 24.4 before 24.4R2-S5; affected 25.2 before 25.2R2-S2; affected 25.4 before 25.4R1-S3; affected 26.2 before 26.2R1-S2

CWE

CWE-122

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.