Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-101936 EUVD-2026-101488GHSA-cwf7-v3fr-vjh3

Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled

Published Oct 14, 2026 · Updated Oct 14, 2026 · Assigned by juniper

Description

A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a denial of service of the data plane via malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2 23.2R2-S7.7

References