CRITICAL 9.2 NVD

CVE-2026-102037

An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated netwo

An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server.

References

Published: 2026-10-14 · Source: NVD · Feed updated: 2026-10-14
This critical severity vulnerability with a CVSS score of 9.2 was published on 2026-10-14 via NVD.

Risk Timeline

CVE Disclosed2026-10-14 · -1 days ago

Remediation Resources

Analysis & PoC
supportportal.juniper.net/JSA112186
vulnfeed aggregates 15189 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.