Skip to content
VulniPulse
Sign in
Advisory severityMedium5.9Juniper Networks Updated

Medium [CVE-2026-102078] Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS)

This medium-severity Juniper Networks advisory covers CVE-2026-102078 affecting Junos OS.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-102078 Source published Source updated

VulniPulse record published Record updated

CVE-2026-102078
Affected products & platforms
Juniper NetworksJunos
Open source advisory

Android app · Google Play

Monitor future Juniper Networks CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

When web filtering for TCP traffic is configured, a high volume of DNS requests increases the likelihood of a flowd crash and restart, which leads to a complete service outage until the service has automatically recovered. This is a race condition outside the attacker's direct control.

This issue affects Junos OS on SRX Series:

  • All versions before 23.2R2-S5;
  • from 23.4 before 23.4R2-S6;
  • from 25.2 before 25.2R1-S1, 25.2R2.
Affected versions
  • * All versions before 23

Official advisory · high-confidence parse· fetched 7 days ago·verify at source

Fixed versions
  • 23.2R2-S5
  • 23.4R2-S6
  • 24.2R2-S3
  • 24.4R2-S1
  • 25.2R1-S1

Official advisory · high-confidence parse· fetched 7 days ago·verify at source

Mitigation

Upgrade to a fixed release: 23.2R2-S5, 23.4R2-S6, 24.2R2-S3, 24.4R2-S1, 25.2R1-S1. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 7 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.