CVE-2026-21917CWE-1286

Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash

High · published January 15, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
34.2
In the wild
Unconfirmed
What it is

🚨 A single malformed SSL packet is all it takes to crash your SRX device! 🔥 Think of it like a waiter accidentally serving a dish that doesn't meet health standards — it can cause the whole restaurant to shut down until everything is fixed! 🍽️ An unauthenticated attacker could send a specially crafted packet, triggering a Denial-of-Service (DoS) that causes the system to crash and restart. This means your network security could be temporarily compromised, leaving you vulnerable while the device reboots!

Put simply

Think of it like a waiter accidentally serving a dish that doesn't meet health standards — it can cause the whole restaurant to shut down until everything is fixed! 🍽️ This vulnerability arises from improper validation of the input in the Web-Filtering module of Junos OS on SRX Series. It allows attackers to exploit the system by sending malformed SSL packets, which leads to a failure in the Forwarding Plane Component (FPC).

What to do

An unauthenticated attacker could send a specially crafted packet, triggering a Denial-of-Service (DoS) that causes the system to crash and restart. This means your network security could be temporarily compromised, leaving you vulnerable while the device reboots! To patch this, you should upgrade your Junos OS to at least 23.2R2-S5, 23.4R2-S5, 24.2R2-S2, or 24.4R1-S3, based on your current version. Check your configurations and ensure you’re on a supported version to avoid potential service interruptions. You’ve got this! Stay secure and keep your systems updated! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:Y/R:A/RE:M
EPSS
0.00410 · 34.2th percentile
Weakness
CWE-1286 · Improper Validation of Syntactic Correctness of Input
Published
2026-01-15T20:27Z
EPSS history
Timeline
  • 15 JAN 20:27Z
    Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash
    cvelistv5