CVE-2026-102062: CWE-134 Use of Externally-Controlled Format String in Juniper Networks Junos OS

This vulnerability (CVE-2026-102062) is a Use of Externally-Controlled Format String (CWE-134) in the ipfd daemon component of Juniper Networks Junos OS on SRX Series devices. An unauthenticated attacker can leverage a malicious or impersonated HTTPS feed server to trigger code execution with root privileges. The vulnerability affects several version ranges of Junos OS, specifically versions from 0 up to but not including 23.2R2-S7.7, 23.4 up to 23.4R2-S8.13, 24.2 up to 24.2R2-S5.5, 24.4 up to 24.4R2-S5, 25.2 up to 25.2R2-S2, 25.4 up to 25.4R1-S3, and 26.2 up to 26.2R1-S2. The CVSS v3.1 base score is 8.1, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, but requiring high attack complexity and no privileges or user interaction.

Successful exploitation allows an unauthenticated remote attacker to execute arbitrary code with root privileges on affected Junos OS SRX Series devices. This can lead to full system compromise, including unauthorized access, data manipulation, and service disruption. The vulnerability is exploitable remotely over the network without authentication but requires a compromised or impersonated HTTPS feed server.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or official advisories are provided in the input data, users should monitor Juniper Networks' official security advisories for updates and apply patches or mitigations as soon as they become available. Until then, consider restricting access to the ipfd daemon and validating HTTPS feed server configurations to prevent impersonation.