CVE-2026-101936: Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled

Published Oct 14, 2026

Updated

A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a denial of service of the data plane via malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces.

Affected Software

1 affected component

Juniper Networks Junos OS

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.
Fixed in 23.2R2-S7.7
Upgrade
Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.
Fixed in 23.4R2-S8.13
Upgrade
Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.
Fixed in 24.2R2-S5.5
Upgrade
Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.
Fixed in 24.4R2-S5
Upgrade
Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.
Fixed in 25.2R2-S2
Upgrade
Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.
Fixed in 25.4R1-S3
Upgrade
Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.
Fixed in 25.4R2
Upgrade
Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.
Fixed in 26.2R1-S2
Upgrade
Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.
Fixed in 26.2R2
Upgrade
Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.
Fixed in 26.4R1

Event History

Oct 14, 2026

CVE Published

via MITRE·04:40 PM

Data Sourced

via MITRE·04:40 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Affected deployments are Juniper Networks Junos OS on SRX Series devices where chassis-cluster high availability is enabled and firewall-authentication synchronization traffic is present on chassis-cluster fabric interfaces.

What access does an attacker need?

An attacker must be adjacent to the affected device and able to send malformed firewall-authentication synchronization traffic through the chassis-cluster fabric interfaces. No privileges or user interaction are required.

What is the expected security impact?

Successful exploitation can deny service to the data plane. The provided assessment indicates no confidentiality or integrity impact.