CVE-2026-102062
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthen
CVSS
8.1
High
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Oct 14, 2026 · Last modified: Oct 15, 2026 · CWE-134
Not enough EPSS history yet.
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1019668.2 HIG—
——0A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener.17hCVE-2026-1019658.8 HIG—
——0An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI service.10hCVE-2026-945204.9 MED47.8%
——14Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.2dCVE-2026-858427.8 HIG23.1%
——7Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.2dCVE-2026-835857.8 HIG23.1%
——7Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.2dCVE-2026-767539.8 CRI43.1%
——13A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code.7d