VulnSocial

CVE-2026-57023General(juniper / junos)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial of Service (DoS). When TCP proxy is engaged in a flow session, to support ALGs, Advanced Anti-Malware, ICAP or UTM, a TCP packet with specifically malformed TCP header will cause flow processing daemon (flowd) to crash and restart. This causes a complete service outage until the system has automatically recovered. This issue affects Junos OS on MX with SPC3, and SRX Series:  * 23.4 versions before 23.4R2-S7,  * 24.2 versions before 24.2R2-S4,  * 24.4 versions before 24.4R2-S3, * 25.2 versions before 25.2R2. This issue does not affect releases before 23.4R1.

juniper CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-1284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • junos
  • mx-spc3
  • mx240
  • mx480

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
juniper
Products
junosmx-spc3mx240mx480mx960srx1500srx1600srx2300srx300srx320

5 versions affected across 24 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-21: 107-21
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos Juniper ❗ CVE-2026-57026 ❗ CVE-2026-57023 ❗ CVE-2026-33794 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-juniper-3/ https://t.co/FGoA3a9rSG

    Post summary

    The tweet lists three CVEs affecting Juniper products and provides a link for more information, but offers no technical details, patches, or evidence of exploitation.

    00010212
    6.7K followersView on X
CPE platform detail53 entries

53 of 53 entries

PartVendorProductVersionTarget SWTarget HW
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos25.2--
OSjuniperjunos25.2--
OSjuniperjunos25.2--
OSjuniperjunos25.2--
HWjunipermx-spc3---
HWjunipermx240---
HWjunipermx480---
HWjunipermx960---
HWjunipersrx1500---
HWjunipersrx1600---
HWjunipersrx2300---
HWjunipersrx300---
HWjunipersrx320---
HWjunipersrx340---
HWjunipersrx345---
HWjunipersrx380---
HWjunipersrx400---
HWjunipersrx4100---
HWjunipersrx4120---
HWjunipersrx4200---
HWjunipersrx4300---
HWjunipersrx440---
HWjunipersrx4600---
HWjunipersrx4700---
HWjunipersrx5400---
HWjunipersrx5600---
HWjunipersrx5800---

Explore more

Back to dashboardjuniper CVEsjunos vulnerabilities