Vulnerabilities

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX…

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Juniper Networks

Product

Junos OS, SRX / MX / EX / QFX

CVSS

8.1

EPSS

0.004 (p33)

Exposure class

Edge / VPN / firewall

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-101997 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 28
   CVE NVD 17d ago

   An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of…

   CVSS 8.8 CVE-2026-102059 Juniper Networks