CVE-2026-57022

Name of the Vulnerable Software and Affected Versions Junos OS on MX Series with SPC3 versions prior to 23.2R2-S4 Junos OS on SRX5k Series with SPC3 versions prior to 23.2R2-S4 Junos OS on SRX1600 Series versions prior to 23.2R2-S4 Junos OS on SRX2300 Series versions prior to 23.2R2-S4 Junos OS on SRX4000 Series versions prior to 23.2R2-S4 Junos OS on vSRX Series versions prior to 23.2R2-S4 Junos OS on MX Series with SPC3 versions 23.4 prior to 23.4R2-S5 Junos OS on SRX5k Series with SPC3 versions 23.4 prior to 23.4R2-S5 Junos OS on SRX1600 Series versions 23.4 prior to 23.4R2-S5 Junos OS on SRX2300 Series versions 23.4 prior to 23.4R2-S5 Junos OS on SRX4000 Series versions 23.4 prior to 23.4R2-S5 Junos OS on vSRX Series versions 23.4 prior to 23.4R2-S5 Junos OS on MX Series with SPC3 versions 24.2 prior to 24.2R2 Junos OS on SRX5k Series with SPC3 versions 24.2 prior to 24.2R2 Junos OS on SRX1600 Series versions 24.2 prior to 24.2R2 Junos OS on SRX2300 Series versions 24.2 prior to 24.2R2 Junos OS on SRX4000 Series versions 24.2 prior to 24.2R2 Junos OS on vSRX Series versions 24.2 prior to 24.2R2

Description An improper check for unusual or exceptional conditions in the Packet Forwarding Engine (PFE) allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). The issue occurs when an affected device initiates a TCP connection to a system controlled by the attacker that responds with a specific packet, leading to a PFE crash and restart. This disruption affects all services until the system automatically recovers. This can occur during scenarios such as ALG, SSL proxy, UTM, RTLOG, AppQoE probing, AAMW, ICAP, and URL filtering.

Recommendations Update MX Series with SPC3, SRX5k Series with SPC3, SRX1600 Series, SRX2300 Series, SRX4000 Series, and vSRX Series to version 23.2R2-S4 or later. Update MX Series with SPC3, SRX5k Series with SPC3, SRX1600 Series, SRX2300 Series, SRX4000 Series, and vSRX Series versions 23.4 to 23.4R2-S5 or later. Update MX Series with SPC3, SRX5k Series with SPC3, SRX1600 Series, SRX2300 Series, SRX4000 Series, and vSRX Series versions 24.2 to 24.2R2 or later.