CVE-2026-21906

EPSS 0.51%
Veröffentlicht 15.01.2026 20:20:32
Zuletzt bearbeitet 23.01.2026 19:40:34
Erkennungen
Login

Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash

An Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker sending a specific ICMP packet through a GRE tunnel to cause the PFE to crash and restart.

When PowerMode IPsec (PMI) and GRE performance acceleration are enabled and the device receives a specific ICMP packet, a crash occurs in the SRX PFE, resulting in traffic loss. PMI is enabled by default, and GRE performance acceleration can be enabled by running the configuration command shown below. PMI is a mode of operation that provides IPsec performance improvements using Vector Packet Processing.

Note that PMI with GRE performance acceleration is only supported on specific SRX platforms.
This issue affects Junos OS on the SRX Series:



  *  all versions before 21.4R3-S12, 
  *  from 22.4 before 22.4R3-S8, 
  *  from 23.2 before 23.2R2-S5, 
  *  from 23.4 before 23.4R2-S5, 
  *  from 24.2 before 24.2R2-S3, 
  *  from 24.4 before 24.4R2-S1, 
  *  from 25.2 before 25.2R1-S1, 25.2R2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 68 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version < 21.4

   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx1600 Version -
   Juniper ≫ Srx2300 Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx380 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4120 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx4300 Version -
   Juniper ≫ Srx4600 Version -
   Juniper ≫ Srx4700 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -

Juniper ≫ Junos Version 21.4 Update -

Juniper ≫ Junos Version 21.4 Update r1

Juniper ≫ Junos Version 21.4 Update r1-s1

Juniper ≫ Junos Version 21.4 Update r1-s2

Juniper ≫ Junos Version 21.4 Update r2

Juniper ≫ Junos Version 21.4 Update r2-s1

Juniper ≫ Junos Version 21.4 Update r2-s2

Juniper ≫ Junos Version 21.4 Update r3

Juniper ≫ Junos Version 21.4 Update r3-s1

Juniper ≫ Junos Version 21.4 Update r3-s10

Juniper ≫ Junos Version 21.4 Update r3-s11

Juniper ≫ Junos Version 21.4 Update r3-s2

Juniper ≫ Junos Version 21.4 Update r3-s3

Juniper ≫ Junos Version 21.4 Update r3-s4

Juniper ≫ Junos Version 21.4 Update r3-s5

Juniper ≫ Junos Version 21.4 Update r3-s6

Juniper ≫ Junos Version 21.4 Update r3-s7

Juniper ≫ Junos Version 21.4 Update r3-s8

Juniper ≫ Junos Version 21.4 Update r3-s9

Juniper ≫ Junos Version 22.4 Update -

Juniper ≫ Junos Version 22.4 Update r1

Juniper ≫ Junos Version 22.4 Update r1-s1

Juniper ≫ Junos Version 22.4 Update r1-s2

Juniper ≫ Junos Version 22.4 Update r2

Juniper ≫ Junos Version 22.4 Update r2-s1

Juniper ≫ Junos Version 22.4 Update r2-s2

Juniper ≫ Junos Version 22.4 Update r3

Juniper ≫ Junos Version 22.4 Update r3-s1

Juniper ≫ Junos Version 22.4 Update r3-s2

Juniper ≫ Junos Version 22.4 Update r3-s3

Juniper ≫ Junos Version 22.4 Update r3-s4

Juniper ≫ Junos Version 22.4 Update r3-s5

Juniper ≫ Junos Version 22.4 Update r3-s6

Juniper ≫ Junos Version 22.4 Update r3-s7

Juniper ≫ Junos Version 23.2 Update -

Juniper ≫ Junos Version 23.2 Update r1

Juniper ≫ Junos Version 23.2 Update r1-s1

Juniper ≫ Junos Version 23.2 Update r1-s2

Juniper ≫ Junos Version 23.2 Update r2

Juniper ≫ Junos Version 23.2 Update r2-s1

Juniper ≫ Junos Version 23.2 Update r2-s2

Juniper ≫ Junos Version 23.2 Update r2-s3

Juniper ≫ Junos Version 23.2 Update r2-s4

Juniper ≫ Junos Version 23.4 Update -

Juniper ≫ Junos Version 23.4 Update r1

Juniper ≫ Junos Version 23.4 Update r1-s1

Juniper ≫ Junos Version 23.4 Update r1-s2

Juniper ≫ Junos Version 23.4 Update r2

Juniper ≫ Junos Version 23.4 Update r2-s1

Juniper ≫ Junos Version 23.4 Update r2-s2

Juniper ≫ Junos Version 23.4 Update r2-s3

Juniper ≫ Junos Version 23.4 Update r2-s4

Juniper ≫ Junos Version 24.2 Update -

Juniper ≫ Junos Version 24.2 Update r1

Juniper ≫ Junos Version 24.2 Update r1-s1

Juniper ≫ Junos Version 24.2 Update r1-s2

Juniper ≫ Junos Version 24.2 Update r2

Juniper ≫ Junos Version 24.2 Update r2-s1

Juniper ≫ Junos Version 24.2 Update r2-s2

Juniper ≫ Junos Version 24.4 Update -

Juniper ≫ Junos Version 24.4 Update r1

Juniper ≫ Junos Version 24.4 Update r1-s2

Juniper ≫ Junos Version 24.4 Update r1-s3

Juniper ≫ Junos Version 24.4 Update r2

Juniper ≫ Junos Version 25.2 Update -

Juniper ≫ Junos Version 25.2 Update r1

Juniper ≫ Junos Version 25.2 Update r2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.51%	0.408

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Juniper	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Juniper	8.7	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Red

CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

https://supportportal.juniper.net/JSA106005

Vendor Advisory

https://www.juniper.net/documentation/us/en/software/junos/vpn-ipsec/topics/topic-map/security-powermode-ipsec-vpn.html

Technical Description

https://kb.juniper.net/JSA106005

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-21906

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-21906

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-21906

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-21906