Juniper SRX WebFiltering Crash DoS Vulnerability (CVE-2026-102083) Advisory

Juniper OS-SRX Series Crash Vulnerability When HTTP Session Loading Occurs with WebFiltering Enabled (CVE-2026-102083) Vulnerability Overview When the WebFiltering feature is enabled, Juniper OS-SRX series devices contain a crash vulnerability during HTTP session loading. Attackers can exploit this vulnerability by sending specially crafted HTTP requests to trigger a process crash, resulting in service disruption (Denial of Service). This vulnerability affects all SRX devices with WebFiltering enabled. Scope of Impact Affected Products: Juniper OS-SRX Series Affected Versions: - 22.3 versions (22.3R0-S1 to 22.3R0-S13) - 22.4 versions (22.4R0-S1 to 22.4R0-S13) - 23.1 versions (23.1R0-S1 to 23.1R0-S13) - 23.2 versions (23.2R0-S1 to 23.2R0-S13) - 23.3 versions (23.3R0-S1 to 23.3R0-S13) - 23.4 versions (23.4R0-S1 to 23.4R0-S13) - 24.1 versions (24.1R0-S1 to 24.1R0-S13) - 24.2 versions (24.2R0-S1 to 24.2R0-S13) - 24.3 versions (24.3R0-S1 to 24.3R0-S13) - 24.4 versions (24.4R0-S1 to 24.4R0-S13) - 25.1 versions (25.1R0-S1 to 25.1R0-S13) CVSS Score: 6.5 (Medium Severity) CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Remediation Juniper has released the following patched versions. Users are advised to upgrade to one of the following versions: 22.3R0-S14 and later 22.4R0-S14 and later 23.1R0-S14 and later 23.2R0-S14 and later 23.3R0-S14 and later 23.4R0-S14 and later 24.1R0-S14 and later 24.2R0-S14 and later 24.3R0-S14 and later 24.4R0-S14 and later 25.1R0-S14 and later > Note: This vulnerability only affects devices with the WebFiltering feature enabled. Devices without this feature enabled are not affected. POC/Exploit Code No specific POC or exploit code is provided in the advisory. Additional Information Vulnerability ID: CVE-2026-102083 Release Date: 2026-10-14 Last Updated: 2026-10-14 Related Advisory: JSA11234 Reference Links: - Juniper Security Advisories: https://www.juniper.net/support/security-advisories/ - Juniper Security Advisories Archive: https://www.juniper.net/support/security-advisories/archive/ - Juniper Security Advisories RSS: https://www.juniper.net/support/security-advisories/rss.xml

Goal Reached Thanks to every supporter — we hit 100%!

Juniper SRX WebFiltering Crash DoS Vulnerability (CVE-2026-102083) Advisory