CVE-2026-102061 Juniper Networks CVE debrief

Who should care

Juniper Networks administrators and security teams responsible for Junos OS and Junos OS Evolved systems with Secure-ZTP support should review and apply Juniper Networks security patches, verify Secure-ZTP support on affected platforms, and monitor for crafted DHCP SZTP bootstrap messages. This vulnerability has a high CVSS score of 8.7 and is considered HIGH severity.

Why it matters

CVE-2026-102061 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It requires immediate attention from administrators and security teams to assess exposure and apply patches or compensating controls.

• Potential for arbitrary code execution as root
• Possible disruption of network operations
• Need for patching and verification of Secure-ZTP support

Technical summary

The phone-home daemon (phcd) in Juniper Networks Junos OS and Junos OS Evolved is vulnerable to a Stack-based Buffer Overflow attack. An adjacent unauthenticated attacker can exploit this by sending a crafted DHCP SZTP bootstrap message, potentially leading to arbitrary code execution as root. This issue only affects platforms that support Secure-ZTP. The vulnerability has a high CVSS score of 8.7 and is considered HIGH severity. Juniper Networks administrators and security teams should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Defensive priority

High priority for Juniper Networks Junos OS and Junos OS Evolved systems with Secure-ZTP support

Recommended defensive actions

• Review and apply Juniper Networks security patches for Junos OS and Junos OS Evolved
• Verify Secure-ZTP support on affected platforms
• Monitor for crafted DHCP SZTP bootstrap messages
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but vendor-specific information is limited. The phone-home daemon (phcd) in Juniper Networks Junos OS and Junos OS Evolved is vulnerable to a Stack-based Buffer Overflow attack. An adjacent unauthenticated attacker can exploit this by sending a crafted DHCP SZTP bootstrap message, potentially leading to arbitrary code execution as root. Juniper Networks administrators and security teams should review the supplied official advisory or CVE record to validate affected to

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.