Improper Input Validation in Junos OS IPsec Library Affects Juniper Networks Devices

CVE-2026-33778

What is CVE-2026-33778?

A vulnerability in the IPsec library utilized by the kmd and iked processes in Juniper Networks' Junos OS can lead to significant disruption. An unauthenticated attacker can exploit this flaw by sending a specially crafted first ISAKMP packet, causing the kmd/iked process to crash and restart. This results in a temporary halt in new security associations, preventing the establishment of new VPN connections. Continuous exploitation exacerbates the issue, leading to a complete inability to initiate new connections for affected devices. The vulnerability impacts several versions of Junos OS across SRX and MX Series devices.

References