Paper/Archive/CVE-2026-101997

CVE-2026-101997

Juniper Networks Junos OS — Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication

EPSS 0.4%CVSS 9.2

critical.is priorityof 100

CVSS 9.2 (CNA)9.2 / 10 × 3027.6 Not in CISA KEV+300.0 EPSS percentile 33.3.333 × 206.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection.

Affected

ProductAffectedFixed inSource

Junos OS< 23.2R2-S7.723.2R2-S7.7CNA

Junos OS23.4 – < 23.4R2-S8.1323.4R2-S8.13CNA

Junos OS24.2 – < 24.2R2-S5.524.2R2-S5.5CNA

Junos OS24.4 – < 24.4R2-S524.4R2-S5CNA

Junos OS25.2 – < 25.2R2-S225.2R2-S2CNA

Junos OS25.4 – < 25.4R1-S325.4R1-S3CNA

Junos OS26.2 – < 26.2R1-S226.2R1-S2CNA

Scores by source

juniper (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L

juniper (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorysupportportal.juniper.net/JSA112186