CVE-2026-57021: Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash

Published Jul 9, 2026
·
Updated

An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a network-based attacker sending specifically formatted requests can trigger an out of bounds write leading to an http-gk process crash. This crash leads to unavailability of all services depending on the [ system services web-management ] configuration (like J-Web, remote access VPN and firewall authentication) until the process automatically restarts.

This issue affects Junos OS on SRX Series:

23.2 versions before 23.2R2-S7, 23.4 versions before 23.4R2-S8, 24.2 versions before 24.2R2-S4, 24.4 versions before 24.4R2-S4, 25.2 versions before 25.2R2, 25.4 versions before 25.4R1-S1, 25.4R2.

Affected Software

65 affected components
Juniper Networks Junos OS (SRX Series) http-gatekeeper (http-gk)<23.2R2-S7, <23.4R2-S8, <24.2R2-S4, <24.4R2-S4, <25.2R2, >25.4<25.4R1-S1
All of the following
Any of the following
Juniper Junos=23.2
Juniper Junos=23.2-r1
Juniper Junos=23.2-r1-s1
Juniper Junos=23.2-r1-s2
Juniper Junos=23.2-r2
Juniper Junos=23.2-r2-s1
Juniper Junos=23.2-r2-s2
Juniper Junos=23.2-r2-s3
Juniper Junos=23.2-r2-s4
Juniper Junos=23.2-r2-s5
Juniper Junos=23.2-r2-s6
Juniper Junos=23.4
Juniper Junos=23.4-r1
Juniper Junos=23.4-r1-s1
Juniper Junos=23.4-r1-s2
Juniper Junos=23.4-r2
Juniper Junos=23.4-r2-s1
Juniper Junos=23.4-r2-s2
Juniper Junos=23.4-r2-s3
Juniper Junos=23.4-r2-s4
Juniper Junos=23.4-r2-s5
Juniper Junos=23.4-r2-s6
Juniper Junos=23.4-r2-s7
Juniper Junos=24.2
Juniper Junos=24.2-r1
Juniper Junos=24.2-r1-s1
Juniper Junos=24.2-r1-s2
Juniper Junos=24.2-r2
Juniper Junos=24.2-r2-s1
Juniper Junos=24.2-r2-s2
Juniper Junos=24.2-r2-s3
Juniper Junos=24.4
Juniper Junos=24.4-r1
Juniper Junos=24.4-r1-s2
Juniper Junos=24.4-r1-s3
Juniper Junos=24.4-r2
Juniper Junos=24.4-r2-s1
Juniper Junos=24.4-r2-s2
Juniper Junos=24.4-r2-s3
Juniper Junos=25.2
Juniper Junos=25.2-r1
Juniper Junos=25.2-r1-s1
Juniper Junos=25.2-r1-s2
Juniper Junos=25.4
Juniper Junos=25.4-r1
Any of the following
Juniper SRX1500
Juniper SRX1600
Juniper SRX2300
Juniper SRX300
Juniper SRX320
Juniper SRX340
Juniper SRX345
Juniper Srx380
Juniper Srx400
Juniper SRX4100
Juniper Srx4120
Juniper SRX4200
Juniper SRX4300
Juniper Srx440
Juniper SRX4600
Juniper SRX4700
Juniper SRX5400
Juniper SRX5600
Juniper SRX5800

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Juniper Networks Junos OS (SRX Series) http-gatekeeper (http-gk) to a version that resolves this vulnerability.

    Fixed in 23.2R2-S7
  2. Upgrade

    Upgrade Juniper Networks Junos OS (SRX Series) http-gatekeeper (http-gk) to a version that resolves this vulnerability.

    Fixed in 23.4R2-S8
  3. Upgrade

    Upgrade Juniper Networks Junos OS (SRX Series) http-gatekeeper (http-gk) to a version that resolves this vulnerability.

    Fixed in 24.2R2-S4
  4. Upgrade

    Upgrade Juniper Networks Junos OS (SRX Series) http-gatekeeper (http-gk) to a version that resolves this vulnerability.

    Fixed in 24.4R2-S4
  5. Upgrade

    Upgrade Juniper Networks Junos OS (SRX Series) http-gatekeeper (http-gk) to a version that resolves this vulnerability.

    Fixed in 25.2R2
  6. Upgrade

    Upgrade Juniper Networks Junos OS (SRX Series) http-gatekeeper (http-gk) to a version that resolves this vulnerability.

    Fixed in 25.4R1-S1
  7. Upgrade

    Upgrade Juniper Networks Junos OS (SRX Series) http-gatekeeper (http-gk) to a version that resolves this vulnerability.

    Fixed in 25.4R2
  8. Upgrade

    Upgrade Juniper Networks Junos OS (SRX Series) http-gatekeeper (http-gk) to a version that resolves this vulnerability.

    Fixed in 26.2R1
  9. Compensating control

    If remote-access VPN with pre-logon compliance check is configured, mitigate by removing/disable the VPN compliance-check configuration until the device is upgraded, since a network-based attacker can crash the http-gk process and cause DoS of services depending on system services web-management.

Event History

Jul 9, 2026
CVE Published
via MITRE·09:05 PM
Data Sourced
via MITRE·09:05 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-57021?

CVE-2026-57021 has a medium severity score of 6.9.

2

How do I fix CVE-2026-57021?

To fix CVE-2026-57021, ensure that your Junos OS on SRX Series devices is updated to the latest version that addresses this vulnerability.

3

What effect does CVE-2026-57021 have on my system?

CVE-2026-57021 allows an unauthenticated attacker to cause a Denial-of-Service (DoS) by crashing the http-gatekeeper process.

4

Who is affected by CVE-2026-57021?

CVE-2026-57021 affects Juniper Networks Junos OS running on SRX Series devices configured for remote-access VPN with pre-logon compliance checks.

5

Can I exploit CVE-2026-57021 remotely?

Yes, CVE-2026-57021 can be exploited by an unauthenticated, remote-based attacker.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203