CVE-2026-33792: Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured

Published Oct 14, 2026

Updated

A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel.

Affected Software

1 affected component

Juniper Networks Junos OS

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Juniper Junos OS SRX Series to a version that resolves this vulnerability.
Fixed in 23.2R2-S7.7
Upgrade
Upgrade Juniper Junos OS SRX Series to a version that resolves this vulnerability.
Fixed in 23.4R2-S8.13
Upgrade
Upgrade Juniper Junos OS SRX Series to a version that resolves this vulnerability.
Fixed in 24.2R2-S5.5
Upgrade
Upgrade Juniper Junos OS SRX Series to a version that resolves this vulnerability.
Fixed in 24.4R2-S5
Upgrade
Upgrade Juniper Junos OS SRX Series to a version that resolves this vulnerability.
Fixed in 25.2R2-S2
Upgrade
Upgrade Juniper Junos OS SRX Series to a version that resolves this vulnerability.
Fixed in 25.4R1-S3
Upgrade
Upgrade Juniper Junos OS SRX Series to a version that resolves this vulnerability.
Fixed in 25.4R2
Upgrade
Upgrade Juniper Junos OS SRX Series to a version that resolves this vulnerability.
Fixed in 26.2R1-S2
Upgrade
Upgrade Juniper Junos OS SRX Series to a version that resolves this vulnerability.
Fixed in 26.2R2
Upgrade
Upgrade Juniper Junos OS SRX Series to a version that resolves this vulnerability.
Fixed in 26.4R1

Event History

Oct 14, 2026

CVE Published

via MITRE·04:58 PM

Data Sourced

via MITRE·04:58 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this vulnerability?

Juniper Networks Junos OS deployments on SRX Series devices are exposed when a GRE tunnel is configured. The vulnerable srxpfe process handles crafted packets received on that tunnel.

Does exploitation require authentication or user interaction?

No. An unauthenticated network attacker can exploit the issue without user interaction by sending a crafted packet through a configured GRE tunnel.

What impact can successful exploitation have?

Successful exploitation can allow remote code execution as root or cause a denial of service.