CVE-2026-102082

Awaiting Analysis Awaiting Analysis - Queue

Denial-of-Service in Juniper Networks Junos OS SSL Plugin

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS). This issue is will occur when 'ssl-proxy' is configured on SRX platforms and during a TLS session-resumption attempt a specifically malformed TLS message is received. This results in an invalid pointer access and PFE crash which causes a temporary loss of traffic forwarding until the PFE automatically recovers. The exact internal timing to trigger this issue is outside the attacker's direct control.This issue affects Junos OS on SRX Series: * All versions before 23.2R2-S5; * 23.4 versions before 23.4R2-S5; * 24.2 versions before 24.2R2-S2; * 24.4 versions before 24.4R2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102082

EUVD

EUVD-2026-101461

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-166	The product receives input from an upstream component, but it does not handle or incorrectly handles when an expected special element is missing.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Handling of Missing Special Element issue in the SSL plugin of Juniper Networks Junos OS on SRX Series. It allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS) by sending a malformed TLS message during a session-resumption attempt when 'ssl-proxy' is configured. This triggers an invalid pointer access and PFE crash, leading to temporary loss of traffic forwarding until the PFE recovers.

Detection Guidance

Detect this vulnerability by checking if 'ssl-proxy' is configured on SRX platforms and monitoring for crashes during TLS session-resumption attempts. Use 'show security log' and 'show system core-dump' commands to identify crashes. Monitor traffic forwarding interruptions with 'show chassis routing-engine' and 'show system processes extensive'.

Impact Analysis

The vulnerability can cause temporary disruption of network traffic forwarding on affected SRX Series devices. This results in intermittent loss of service until the device automatically recovers. Attackers do not need authentication to exploit this issue, making it a significant risk for network availability.

Compliance Impact

This vulnerability causes a temporary Denial-of-Service (DoS) by crashing the PFE, disrupting traffic forwarding until recovery. Such disruptions may impact data availability, potentially violating GDPR's requirement for timely access to personal data and HIPAA's availability standards for protected health information.

Mitigation Strategies

Upgrade Junos OS on SRX Series to versions 23.2R2-S5, 23.4R2-S5, 24.2R2-S2, or 24.4R2 or later. If immediate upgrade is not possible, disable the 'ssl-proxy' configuration as a temporary workaround.

Hi! I’m here to help you understand CVE-2026-102082. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70