PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-102045 Juniper Networks CVE debrief

A crafted LACP frame can cause lacpd to crash on Junos OS Evolved when LACP is enabled, leading to a denial of service. This issue affects various versions of Junos OS Evolved, specifically those prior to 24.4R2-S5-EVO, 25.2R2-S2-EVO, 25.4R1-S3-EVO, 26.2R1-S2-EVO, 25.2X100-D35-EVO, and 25.4X300-D40-EVO. The vulnerability is a medium-severity issue that can be exploited by a Layer-2-adjacent attacker to cause a denial of service via a crafted frame received on an LACP-enabled aggregated-Ethernet member port.

Vendor
Juniper Networks
Product
Junos OS Evolved
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-14
Advisory published
2026-10-14
Advisory updated
2026-10-14

Who should care

Network administrators and security teams responsible for Junos OS Evolved systems, especially those with LACP enabled, should assess exposure and prioritize patching or mitigation.

Why it matters

CVE-2026-102045 is a medium-severity vulnerability in Junos OS Evolved that can cause lacpd to crash, leading to a denial of service. Defenders should prioritize patching or mitigating this issue to prevent potential attacks.

  • Potential denial-of-service attacks on Junos OS Evolved systems with LACP enabled.
  • Need to verify LACP is not enabled on untrusted interfaces.
  • Requires patching or mitigating affected Junos OS Evolved versions.

Technical summary

An out-of-bounds write vulnerability in lacpd of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of service via a crafted frame received on an LACP-enabled aggregated-Ethernet member port. The vulnerability affects various versions of Junos OS Evolved, specifically those prior to 24.4R2-S5-EVO, 25.2R2-S2-EVO, 25.4R1-S3-EVO, 26.2R1-S2-EVO, 25.2X100-D35-EVO, and 25.4X300-D40-EVO. Defenders should prioritize patching or mitigating this issue to prevent potential attacks.

Defensive priority

Defenders should prioritize patching or mitigating this vulnerability to prevent potential denial-of-service attacks on Junos OS Evolved systems with LACP enabled.

Recommended defensive actions

  • Review and apply patches from Juniper Networks for affected Junos OS Evolved versions.
  • Implement compensating controls, such as monitoring LACP traffic for anomalies.
  • Verify LACP is not enabled on untrusted interfaces.

Evidence notes

The CVE record and source item provide details on the vulnerability, including its impact on Junos OS Evolved and affected versions. The issue is caused by an out-of-bounds write vulnerability in lacpd of Juniper Networks Junos OS Evolved. The CVE record was published on 2026-10-14T16:52:36.942Z and has not been modified since then. There is no evidence of public exploitation, but defenders should verify LACP is not enabled on untrusted interfaces and review compensating controls for

Sources and references

Verified primary and authoritative sources

  • CVE-2026-102045 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-102045

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-102045 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-102045

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.