CVE-2026-101997

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection.

Score

CVSS 4.0 9.2 Critical

Status

Awaiting Analysis - sirt@juniper.net

Published

2026-10-14

Last modified

2026-10-16

Weaknesses

CWE-89

Affected products

• Junos Os (Juniper Networks)

References

• https://supportportal.juniper.net/JSA112186