GCVE-110-NCSC-2026-430

Advisory PublishedCVSS 6.5/10

Vulnetix · Advisory published October 16, 2026

A heap-based buffer overflow vulnerability in Juniper Networks Junos OS VXLAN Gateway Daemon (vgd) can be exploited via crafted OVSDB messages to cause control plane outages and enable remote code execution.

Download JSON Open in Console

Weaknesses (CWE)

CWE-122Heap-based Buffer OverflowCWE-121Stack-based Buffer OverflowCWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-617Reachable AssertionCWE-409Improper Handling of Highly Compressed Data (Data Amplification)CWE-134Use of Externally-Controlled Format StringCWE-191Integer Underflow (Wrap or Wraparound)CWE-476NULL Pointer DereferenceCWE-195Signed to Unsigned Conversion Error

Risk Scores

CVSS 3.1

6.5/10

Medium · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
Juniper	vers:unknown/*	—	—

Aliases

CVE-2026-101937 CVE-2026-101955 CVE-2026-101956 CVE-2026-101973 CVE-2026-101980 CVE-2026-102014 CVE-2026-102057 CVE-2026-102062 CVE-2026-102063 CVE-2026-102069 CVE-2026-102070 CVE-2026-102072 CVE-2026-102176 CVE-2026-102182 CVE-2026-103994

References

advisory

Browse GCVE Records

5,487 records in the GCVE database · Updated October 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON