CVE-2026-101997
8.1HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-89
Impact
An unauthenticated remote attacker can execute arbitrary code as root if they can intercept or control a configured Security Intelligence feed connection. They need network-level position to manipulate feed traffic or compromise the feed source.
Root cause
The ipfd process improperly sanitizes incoming feed data, allowing SQL injection during feed processing.
Affected systems
Juniper Networks Junos OS on SRX Series (versions not listed — check the vendor advisory).
CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Junos OS to the resolved release specified in JSA112186. As an interim workaround, disable or remove untrusted SecIntel feeds and ensure feed traffic routes over trusted, authenticated channels.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection.