{"id":"CVE-2026-102078","title":"A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).\n\n\n\nWhen web filtering for TCP traffic i…","summary":"A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).\n\n\n\nWhen web filtering for TCP traffic i…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"published":"2026-10-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T17:18:03.400","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-102078","references":[{"url":"https://supportportal.juniper.net/JSA112181","label":"sirt@juniper.net"}],"tags":["nvd"],"ingestedAt":"2026-10-14T17:44:53.665Z","slug":"CVE-2026-102078","body":"## Overview\n\nA Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).\n\n\n\nWhen web filtering for TCP traffic is configured, a high volume of DNS requests increases the likelihood of a flowd crash and restart, which leads to a complete service outage until the service has automatically recovered. This is a race condition outside the attacker's direct control.\n\nThis issue affects Junos OS on SRX Series:\n\n\n  *  All versions before 23.2R2-S5;\n  *  from 23.4 before 23.4R2-S6;\n  *  from 24.2 before 24.2R2-S3;\n  *  from 24.4 before 24.4R2-S1;\n  *  from 25.2 before 25.2R1-S1, 25.2R2.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":32,"depthScoreParts":{"impact":32.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}