Skip to content
Threat Feed
Subscribe

Product

Junos OS on MX Series With SPC3 (24.2 Versions Before 24.2R2-S5)

1 brief RSS
medium advisory

CVE-2026-57026 - Improper Validation of SIP Input in Juniper Junos OS Leads to DoS

An unauthenticated, network-based attacker can exploit CVE-2026-57026, an improper input validation vulnerability, in the SIP plugin of Juniper Networks Junos OS. If the SIP ALG is enabled on affected MX Series with SPC3 or SRX Series devices, processing a malformed SIP invite packet will cause the flow processing daemon (flowd) to crash and restart, leading to a complete denial of service until the system recovers.

Junos OS on MX Series with SPC3 +11 denial-of-service vulnerability juniper network
1t 1c