Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.2
CVE-2026-101955: Juniper SRX can be hijacked or crash with malformed DNS
CVE-2026-101955 · published today
Summary
Juniper's SRX firewalls running Junos OS may be vulnerable when the anti‑spam DNS blacklist feature is turned on. A specially crafted DNS request can cause the device to stop working or allow an attacker to run their own code. Disable the anti‑spam DNS blacklist feature or apply the latest Juniper security update to fix the problem.
What to do
- Update juniper networks junos os to version 23.2R2-S7.7 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| juniper networks | junos os | < 23.2R2-S7.7 |
Original advisory text
Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used
A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via a injected malformed DNS packet when Anti-Spam SBL inspection is enabled.
References
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Severity
9.2
Critical
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Track software like this
Free during beta