{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/junos-os-srx-series--23.2r2-s7.7-23.4r2-s7-24.2r2-s4-24.4r2-s3-25.2r2-25.4r1-s3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:o:juniper:junos_os:*:*:*:*:*:srx_series:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-102084"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Junos OS (SRX Series \u003c 23.2R2-S7.7, 23.4R2-S7, 24.2R2-S4, 24.4R2-S3, 25.2R2, 25.4R1-S3)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","cve","network-security","juniper"],"_cs_type":"advisory","_cs_vendors":["Juniper"],"content_html":"\u003cp\u003eCVE-2026-102084 is a critical vulnerability affecting the VPN daemon of Juniper Networks Junos OS on SRX Series platforms configured for AutoDiscovery VPN (ADVPN). The vulnerability arises from improper validation of the syntactic correctness of incoming peer messages. When a specifically malformed attribute is processed within these messages, it triggers a buffer overflow condition. An authenticated, network-based attacker - specifically one capable of impersonating a VPN peer through the acquisition of a shared secret - can leverage this flaw to execute arbitrary code with the privileges of the VPN daemon. Successful exploitation results in complete control over the affected SRX device, compromising the security boundary of the network. This vulnerability impacts multiple branches of Junos OS, requiring administrators to apply vendor-supplied patches to restore input validation integrity.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe impact of this vulnerability is total device compromise, allowing an attacker to intercept traffic, reconfigure security policies, or gain a persistent foothold within the network. Because the SRX Series often serves as the edge or core firewall, the scope includes potential exposure of all proxied network traffic. The requirement for a shared secret makes the attack vector constrained but highly dangerous for organizations with large, distributed VPN environments where peer credentials may be subject to lateral movement or credential theft.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePatch the affected SRX Series devices immediately to the corrected Junos OS versions: 23.2R2-S7.7, 23.4R2-S7, 24.2R2-S4, 24.4R2-S3, 25.2R2, or 25.4R1-S3.\u003c/li\u003e\n\u003cli\u003eAudit VPN peer shared secrets and initiate rotation for all exposed AutoDiscovery VPN (ADVPN) nodes to minimize the risk of unauthorized impersonation.\u003c/li\u003e\n\u003cli\u003eMonitor device logs for anomalous VPN daemon crashes or restarts that may indicate failed or iterative exploitation attempts targeting the malformed attribute handling logic.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T18:42:38Z","date_published":"2026-10-14T18:42:38Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-102084/","summary":"An improper input validation vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated attacker to achieve remote code execution via a buffer overflow in AutoDiscovery VPN messages.","title":"Buffer Overflow in Juniper Junos OS VPN Daemon","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-102084/"}],"language":"en","title":"CraftedSignal Threat Feed - Junos OS (SRX Series \u003c 23.2R2-S7.7, 23.4R2-S7, 24.2R2-S4, 24.4R2-S3, 25.2R2, 25.4R1-S3)","version":"https://jsonfeed.org/version/1.1"}