Paper/Archive/CVE-2026-102037

CVE-2026-102037

Juniper Networks Junos OS — Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used

EPSS 0.5%CVSS 9.2

critical.is priorityof 100

CVSS 9.2 (CNA)9.2 / 10 × 3027.6 Not in CISA KEV+300.0 EPSS percentile 41.5.415 × 208.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server.

Affected

ProductAffectedFixed inSource

Junos OS23.4 – < 23.4R2-S8.1323.4R2-S8.13CNA

Junos OS24.2 – < 24.2R2-S5.524.2R2-S5.5CNA

Junos OS24.4 – < 24.4R2-S524.4R2-S5CNA

Junos OS25.2 – < 25.2R2-S225.2R2-S2CNA

Junos OS25.4 – < 25.4R1-S325.4R1-S3CNA

Junos OS26.2 – < 26.2R1-S226.2R1-S2CNA

Scores by source

juniper (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/AU:Y/R:A/V:C/RE:M

juniper (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorysupportportal.juniper.net/JSA112186