CVE-2026-33778Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes
Updated under an hour ago ()
Does this affect you?
It affects Juniper Networks Junos OS and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS). If an affected device receives a specifically malformed first ISAKMP packet from the initiator, the kmd/iked process will crash and restart, which momentarily prevents new security associations (SAs) for from being established. Repeated exploitation of this vulnerability causes a complete inability to establish new VPN connections. This issue affects Junos OS on SRX Series and MX Series: * all versions before 22.4R3-S9, * 23.2 version before 23.2R2-S6, * 23.4 version before 23.4R2-S7, * 24.2 versions before 24.2R2-S4, * 24.4 versions before 24.4R2-S3, * 25.2 versions before 25.2R1-S2, 25.2R2.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-1286
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- juniper
- NVD analysis
- Analyzed
- Record last updated
- Apr 10, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Juniper Networks Junos OS juniper_networks:junos_os (from the name) | before 22.4R3-S9; from 23.2 before 23.2R2-S6; from 23.4 before 23.4R2-S7; from 24.2 before 24.2R2-S4; from 24.4 before 24.4R2-S3; from 25.2 before 25.2R1-S2, 25.2R2 | CNA record |
juniper junos juniper:junos | before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; and 49 more ranges | NVD |
References
- https://kb.juniper.net/JSA107868vendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.