Skip to content
OpenAdvisories
High · 8.1 CVE-2026-101997 EUVD-2026-101469GHSA-mqrp-79wg-jvr3

Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication

Published Oct 14, 2026 · Updated Oct 16, 2026 · Assigned by juniper

Vendor: Juniper Networks Product: Junos OS Category: Network devices

Description

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2 23.2R2-S7.7

References