Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-33792 EUVD-2026-101402GHSA-8g7f-8jqh-v9wr

Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured

Published Oct 14, 2026 · Updated Oct 15, 2026 · Assigned by juniper

Description

A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2 23.2R2-S7.7

References