Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.2
CVE-2026-101997: Juniper Junos OS on SRX devices lets network attacker run code as admin
CVE-2026-101997 · published today
Summary
The Junos operating system used on SRX firewalls can be tricked by a specially crafted Security Intelligence feed into executing commands with full system rights. This can happen without any credentials and gives an attacker complete control of the device. Apply the latest Juniper security patch or update the security‑intelligence configuration to require a TLS profile for authentication.
What to do
- Update juniper networks junos os to version 23.2R2-S7.7 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| juniper networks | junos os | < 23.2R2-S7.7 |
Original advisory text
Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection.
References
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Severity
9.2
Critical
Type
CWE-89SQL Injection
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Track software like this
Free during beta