CVE-2026-33792
9.8CriticalPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
Unauthenticated network attackers can execute arbitrary code as root or crash the device by sending crafted packets. They only need network reachability to an interface with a configured GRE tunnel.
Root cause
A stack-based buffer overflow in the srxpfe process when handling incoming GRE traffic.
Affected systems
Juniper Networks Junos OS on SRX Series; specific versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to the fixed Junos OS release referenced in Juniper advisory JSA112186. As an immediate workaround, disable or filter untrusted GRE tunnels using firewall filters to restrict traffic to known peers.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel.