CVE-2026-102062 — Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to exe…
Published: 2026-10-14 · CVSS: 9.2 · CVSS 4.0
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7