CVE-2026-33798
Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in Juniper Networks Junos OS SRX Series

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Juniper Networks, Inc.

Description
A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric traffic.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-15
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-33798
EUVD
EUVD-2026-101405

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow in the srxpfe component of Juniper Networks Junos OS and Junos OS Evolved on SRX Series devices. It allows an attacker on the same Layer 2 network to execute arbitrary code with root privileges by sending specially crafted high-availability fabric traffic.

Detection Guidance

Detection requires monitoring for unusual high-availability fabric traffic patterns or crashes in srxpfe processes. Check logs for segmentation faults or abnormal termination of srxpfe. Juniper recommends inspecting traffic between SRX Series devices for malformed packets targeting fabric interfaces.

Impact Analysis

An attacker could gain full control of affected Juniper SRX Series devices, leading to unauthorized access, data theft, network disruption, or further compromise of connected systems. This could result in operational downtime, loss of sensitive information, or compliance violations.

Compliance Impact

The vulnerability allows arbitrary code execution as root via high-availability fabric traffic, which could lead to unauthorized access, data breaches, or system compromise. This could violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security) by exposing sensitive information or failing to maintain system integrity.

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved patches from Juniper immediately. Disable high-availability fabric traffic if not required. Isolate SRX Series devices from untrusted L2 networks. Monitor for exploitation attempts and restrict access to fabric interfaces.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-33798. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart