Zero Day MonitorZDM

← Back to list

9.8

CVE-2026-33792PATCHED

juniper · junos os

Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured

Description

A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel.

Affected Products

Vendor	Product	Versions
juniper	junos os	0, 23.4, 24.2, 24.4, 25.2, 25.4, 26.2

References

https://supportportal.juniper.net/JSA112186(vendor-advisory)

Related News (2 articles)

Tier B

CERT-FR4d ago

Multiples vulnérabilités dans les produits Juniper Networks (15 octobre 2026)

→ No new info (linked only)

Tier C

VulDB5d ago

CVE-2026-33792 | Juniper Networks Junos OS up to 26.2R1-S1 srxpfe buffer overflow

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

23.2R2-S7.723.4R2-S8.1324.2R2-S5.524.4R2-S525.2R2-S225.4R1-S326.2R1-S2

CWECWE-121

PublishedOct 14, 2026

Trending Score33

Source articles2

Independent2

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-102178

Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise

CRITICALCVE-2026-101982

Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used

CRITICALCVE-2026-33796

Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled

CRITICALCVE-2026-102031

Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled

CRITICALCVE-2026-101954

Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Oct 14, 2026

Discovered by ZDM

Oct 14, 2026

Patch Available

Oct 15, 2026