CVE-2026-57023

highpriority · track · 0EPSS 0.005 · 40 %ileDEEUNLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.46% (40th) EPSS

CVSS 7.5 · high

Is it mine?

16 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · ncsc_nl

EPSS · scored 2026-10-27

An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial of Service (DoS). When TCP proxy is engaged in a flow session, to support ALGs, Advanced Anti-Malware, ICAP or UTM, a TCP packet with specifically malformed TCP header will cause flow processing daemon (flowd) to crash and restart. This causes a complete service outage until the system has automatically recovered. This issue affects Junos OS on MX with SPC3, and SRX Series: * 23.4 versions before 23.4R2-S7, * 24.2 versions before 24.2R2-S4, * 24.4 versions before 24.4R2-S3, * 25.2 versions before 25.2R2. This issue does not affect releases before 23.4R1.

cvss

Technical severity, 0–10. One row per scoring source.

8.7

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.6–8.7

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · sirt@juniper.net USexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · NCSC-NL NL

v4.08.7highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:Y/R:A/RE:Msecondary · ENISA EU

v4.08.7highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:Xsecondary · sirt@juniper.net US

v4.06.6mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1284USCWE-1284US

affected products (16)

Products and version ranges known to be affected.

Juniper EX Seriesall versionscert_bundDEcpe:/h:juniper:ex:-
Juniper JUNOSall versionscert_bundDEcpe:/o:juniper:junos:-
Juniper JUNOS Evolvedall versionscert_bundDEcpe:/o:juniper:junos:evolved
Juniper MX Seriesall versionscert_bundDEcpe:/h:juniper:mx:-
Juniper QFX Seriesall versionscert_bundDEcpe:/h:juniper:qfx:-
Juniper SRX Seriesall versionscert_bundDEcpe:/h:juniper:srx_service_gateways:-
Juniper Networks Junos OS23.4 → 23.4R2-S7enisa_euvdEU
Juniper Networks Junos OS24.2 → 24.2R2-S4enisa_euvdEU
Juniper Networks Junos OS24.4 → 24.4R2-S3enisa_euvdEU
Juniper Networks Junos OS25.2 → 25.2R2enisa_euvdEU
Juniper Networks Junos OS≤ vers:unknown/*ncsc_nlNL
Juniper Networks Junos OS Evolved≤ vers:unknown/*ncsc_nlNL
juniper junos= 23.4nvdUScpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
juniper junos= 24.2nvdUScpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
juniper junos= 24.4nvdUScpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
juniper junos= 25.2nvdUScpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2026-0224Kwetsbaarheden verholpen in Juniper Networks Junos OS en Junos OS EvolvedNL2026-07-13csaf · ncsc_nlNL
Juniper heeft meerdere kwetsbaarheden verholpen in Junos OS en Junos OS Evolved, specifiek voor MX Series, PTX Series, QFX Series, EX Series, SRX Series en QFX10000 Series apparaten.
WID-SEC-W-2026-2257Juniper JUNOS und JUNOS Evolved: Mehrere SchwachstellenDeutsch2026-07-08csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS, JUNOS Evolved, Juniper EX Series, Juniper MX Series, Juniper QFX Series und Juniper SRX Series ausnutzen, um einen Denial of Service Zustand herbeizuführen, um Informationen offenzulegen, um Code auszuführen und um ein undefiniertes Verhalten auszulösen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund ncsc_nl nvd NVD CVE.org MITRE

published 2026-07-09modified 2026-10-25

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan