CVE-2026-101936

Awaiting Analysis Awaiting Analysis - Queue

Reachable Assertion in Juniper Networks Junos OS SRX Series

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a denial of service of the data plane via malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101936

EUVD

EUVD-2026-101488

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-617	The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

Executive Summary

This vulnerability is a Reachable Assertion issue in the srxpfe process of Juniper Networks Junos OS running on SRX Series devices. It allows an adjacent network attacker to disrupt the data plane by sending malformed firewall-authentication synchronization traffic over chassis-cluster fabric interfaces, causing a denial of service.

Detection Guidance

This vulnerability can be detected by monitoring for malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces. Check for unusual srxpfe process behavior or crashes on SRX Series devices.

Impact Analysis

The vulnerability can lead to a denial of service on the data plane of affected Juniper SRX Series devices. This means network traffic may be disrupted, leading to potential loss of connectivity and services for users relying on these devices.

Compliance Impact

This vulnerability causes a denial of service in the data plane via malformed traffic, which could disrupt network operations. Such disruptions may impact compliance with standards like GDPR or HIPAA by compromising data availability or security controls.

Mitigation Strategies

Update Junos OS on SRX Series devices to the latest patched version to address the srxpfe process vulnerability. Monitor firewall-authentication synchronization traffic on chassis-cluster fabric interfaces for malformed packets.

Hi! I’m here to help you understand CVE-2026-101936. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70