CVE-2026-33798
8.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
An adjacent Layer 2 attacker can execute arbitrary code as root on the device without authentication. They need network adjacency to send malicious traffic over the high-availability fabric link.
Root cause
A stack-based buffer overflow in the srxpfe process improperly handles high-availability fabric traffic.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Junos OS and Junos OS Evolved to the resolved versions listed in Juniper advisory JSA112186. As an interim mitigation, restrict and isolate physical and logical access to the dedicated high-availability fabric interfaces.
$ show versionAI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric traffic.