CVE-2026-102037

HIGH Status: Received

CVSS Scores

CVSS v3.x Base Score
8.1
HIGH

Description

An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server.

Published
October 14, 2026 5:17 PM
Last Modified
October 14, 2026 5:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-91

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry