CVE-2026-33792

Summary

A stack-based buffer overflow in Juniper's SRX Series firewall software allows unauthenticated attackers to execute code as root or cause denial of service through crafted packets sent over GRE tunnels. This represents a critical remote code execution vulnerability that could lead to complete system compromise.

Exploitability

Exploitation is relatively straightforward requiring only network access to a configured GRE tunnel, with no authentication required and minimal preconditions beyond having the tunnel enabled.

Blast radius

If exploited, this vulnerability could allow attackers to gain root access to SRX firewalls across an entire network segment, potentially enabling complete compromise of the perimeter security infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Immediate patching required - Upgrade to Junos OS version 23.4R3 or later, as this is the first fixed release addressing CVE-2026-33792.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.