{"id":"CVE-2026-33792","published":"2026-10-14T17:18:27.933","lastModified":"2026-10-15T16:24:19.073","description":"A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://supportportal.juniper.net/JSA112186","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Juniper's SRX Series firewall software allows unauthenticated attackers to execute code as root or cause denial of service through crafted packets sent over GRE tunnels. This represents a critical remote code execution vulnerability that could lead to complete system compromise.","exploitability":"Exploitation is relatively straightforward requiring only network access to a configured GRE tunnel, with no authentication required and minimal preconditions beyond having the tunnel enabled.","blast_radius":"If exploited, this vulnerability could allow attackers to gain root access to SRX firewalls across an entire network segment, potentially enabling complete compromise of the perimeter security infrastructure.","remediation":"Immediate patching required - Upgrade to Junos OS version 23.4R3 or later, as this is the first fixed release addressing CVE-2026-33792.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","network","firewall","srx"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:51:49.075Z"}}