← Back

CVE-2026-57026

nvd nist
Published: Jul 9, 2026Modified: Jul 14, 2026

JSON object

Loading...
8.7
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:XShow less
Source: sirt@juniper.net (Secondary)

Description

An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).If the SIP ALG is enabled on an affected device, the processing of a malformed SIP invite packet will cause a flow processing daemon (flowd) crash and restart. This leads to a complete service outage until the system has automatically recovered. This issue affects Junos OS on MX Series with SPC3 and SRX Series: * all versions before 23.2R2-S7, * 23.4 versions before 23.4R2-S8, * 24.2 versions before 24.2R2-S5, * 24.4 versions before 24.4R2-S4, * 25.2 versions before 25.2R2, * 25.4 versions before 25.4R1-S2.

Affected (48)

Products: Juniper: Junos
Juniper
1 product
Junos
Configuration A
48 vulnerable · 23 platform
Vulnerable SoftwareAffected Versions
Juniper
Junos
Before 23.2
Junos
Version 23.2
Junos
Version 23.2 r1-s1
Junos
Version 23.2 r1-s2
Junos
Version 23.2 r1
Junos
Version 23.2 r2-s1
Junos
Version 23.2 r2-s2
Junos
Version 23.2 r2-s3
Junos
Version 23.2 r2-s4
Junos
Version 23.2 r2-s5
Junos
Version 23.2 r2-s6
Junos
Version 23.2 r2
Junos
Version 23.4
Junos
Version 23.4 r1-s1
Junos
Version 23.4 r1-s2
Junos
Version 23.4 r1
Junos
Version 23.4 r2-s1
Junos
Version 23.4 r2-s2
Junos
Version 23.4 r2-s3
Junos
Version 23.4 r2-s4
Junos
Version 23.4 r2-s5
Junos
Version 23.4 r2-s6
Junos
Version 23.4 r2-s7
Junos
Version 23.4 r2
Junos
Version 24.2
Junos
Version 24.2 r1-s1
Junos
Version 24.2 r1-s2
Junos
Version 24.2 r1
Junos
Version 24.2 r2-s1
Junos
Version 24.2 r2-s2
Junos
Version 24.2 r2-s3
Junos
Version 24.2 r2-s4
Junos
Version 24.2 r2
Junos
Version 24.4
Junos
Version 24.4 r1-s2
Junos
Version 24.4 r1-s3
Junos
Version 24.4 r1
Junos
Version 24.4 r2-s1
Junos
Version 24.4 r2-s2
Junos
Version 24.4 r2-s3
Junos
Version 24.4 r2
Junos
Version 25.2
Junos
Version 25.2 r1-s1
Junos
Version 25.2 r1-s2
Junos
Version 25.2 r1
Junos
Version 25.4
Junos
Version 25.4 r1-s1
Junos
Version 25.4 r1
Running on/withPlatform Versions
Juniper
Mx Spc3
All versions
Juniper
Mx240
All versions
Juniper
Mx480
All versions
Juniper
Mx960
All versions
Juniper
Srx1500
All versions
Juniper
Srx1600
All versions
Juniper
Srx2300
All versions
Juniper
Srx300
All versions
Juniper
Srx320
All versions
Juniper
Srx340
All versions
Juniper
Srx345
All versions
Juniper
Srx380
All versions
Juniper
Srx400
All versions
Juniper
Srx4100
All versions
Juniper
Srx4120
All versions
Juniper
Srx4200
All versions
Juniper
Srx4300
All versions
Juniper
Srx440
All versions
Juniper
Srx4600
All versions
Juniper
Srx4700
All versions
Juniper
Srx5400
All versions
Juniper
Srx5600
All versions
Juniper
Srx5800
All versions

Related CWEs

CWE-1286
Improper Validation of Syntactic Correctness of Input
The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

References (1)

Source: sirt@juniper.net
Vendor Advisory

Timeline

No history available yet.