BaselineWatch
Desk

CVE-2026-102062

9.2 critical SSVC exploitation: none Awaiting Analysis

An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server.

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 2

  1. StatusReceived → Awaiting AnalysisNVD modified 2026-10-15 16:24
  2. First seenCVSS 9.2NVD modified 2026-10-14 17:18

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 1