← CVE Intelligence

CVE-2026-101997

Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication PUBLISHED

Description (CNA)

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection.

Affected (CNA)

Vendor / productVersions
Juniper Networks / Junos OSaffected 0 before 23.2R2-S7.7; affected 23.4 before 23.4R2-S8.13; affected 24.2 before 24.2R2-S5.5; affected 24.4 before 24.4R2-S5; affected 25.2 before 25.2R2-S2; affected 25.4 before 25.4R1-S3; affected 26.2 before 26.2R1-S2

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.