Security1 hOctober 26, 2026, 19:42

CVE-2026-101983: Junos httpd stack overflow enables pre-auth RCE via J-Web

A stack-based buffer overflow in the Junos httpd process (CVE-2026-101983, CVSS 9.8) lets an unauthenticated network attacker achieve remote code execution and denial of service on Junos OS and Junos OS Evolved devices. The trigger is a J-Web virtual-domain configuration; fixes shipped in Juniper's October 2026 bulletin.

DEV Community

Open source

CVE-2026-101983: Junos httpd stack overflow enables pre-auth RCE via J-Web

CVSS 9.8 (v3.1) and 9.3 (v4.0); NVD status is Awaiting Analysis
Affected: Junos OS before 23.2R2-S7.7, 24.4R2-S5, 26.2R1-S2 and others
Exploitation path requires a configured J-Web virtual domain
Not listed in CISA KEV catalog as of 2026.10.23

#Juniper#Junos

Pre-auth RCE in Junos srxpfe on SRX exposed via GRE tunnels

Security

Apache httpd patch fixes mod_vhost_alias stack buffer overflow

Security

CVE-2026-8452 in Citrix NetScaler: SAML parsing overflow leads to pre-auth RCE

Security

CVE-2026-101983: Junos httpd stack overflow enables pre-auth RCE via J-Web

Pre-auth RCE in Junos srxpfe on SRX exposed via GRE tunnels

Apache httpd patch fixes mod_vhost_alias stack buffer overflow

CVE-2026-8452 in Citrix NetScaler: SAML parsing overflow leads to pre-auth RCE

Two Junos flaws with CVSS 9.8 reach root via BGP Monitoring Protocol