#NØØT_Security_Alerts 🚨 #ALERT — JUNIPER SRX: CRITICAL ROOT-LEVEL RCE VIA COMPROMISED SECURITY INTELLIGENCE FEEDS October 14, 2026 DISCLOSED BY: Juniper Networks SIRT PRODUCT: Junos OS — SRX Series CVE: CVE-2026-102062 SEVERITY: CRITICAL — CVSS 4.0: 9.2 CVSS 3.1: 8.1 WEAKNESS: CWE-134 — Format String Vulnerability AFFECTED VERSIONS: Junos OS before the applicable branch fixes: 23.2R2-S7.7 / 23.4R2-S8.13 / 24.2R2-S5.5 / 24.4R2-S5 / 25.2R2-S2 / 25.4R1-S3 / 26.2R1-S2. IMPACT: An unauthenticated network attacker can potentially execute arbitrary code with root privileges through the vulnerable ipfd daemon. EXPOSURE: The SRX device must use Security Intelligence with a configured HTTPS feed server. An attacker must compromise or impersonate that configured feed server. Simply exposing an SRX management interface does NOT establish this attack path. EXPLOITATION STATUS: VENDOR-CONFIRMED CRITICAL RCE VULNERABILITY. Juniper reports no known malicious exploitation. No independently verified public working exploit established. Forensic triage: Review configured Security Intelligence feed URLs. Investigate unexpected feed-source changes, suspicious HTTPS connections, abnormal ipfd behavior and unauthorized configuration modifications. No verified CVE-specific attacker IOCs published. URGENT ACTION: Upgrade to the applicable fixed Junos OS release. Verify the integrity and authorization of configured HTTPS feed sources. Investigate suspicious feed infrastructure. Juniper reports no known workaround. SOURCE: https://supportportal.juniper.net/JSA112186 OFFICIAL CVE: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102062.json CONFIDENCE: HIGH — Juniper-authored CVE record confirms root-level execution impact, precise prerequisites and remediation. ACTIVE EXPLOITATION: NOT VERIFIED. #CyberSecurity #ThreatIntel #Juniper #Junos #RCE #NetworkSecurity