A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series…
A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS). On SRX4000 Series, and SRX5000 Series with SPC3, and MX Series with SPC3, when one or more specific application services like ALGs, IDP/DPI, APPID, SECINTEL, AAMW or AppQoE are configured, a high connections per second churn will cause PFE memory to leak. If the memory is exhausted traffic processing will be impacted. Use the CLI command show security
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Juniper Networks
- Product
- Junos OS, SRX / MX / EX / QFX
- CVSS
- 7.5
- EPSS
- 0.004 (p31)
- Exposure class
- Edge / VPN / firewall
Why it ranks 28 (Notable)
- CVSS 7.5 high
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Juniper Networks)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-102081 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.