CVE-2026-33790

CWE-7544 documents4 sources
Severity
8.7HIGH
EPSS
0.0%
top 87.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Juniper Networks Junos OS
Timeline
PublishedApr 9
Latest updateApr 10

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker sending a specific, malformed ICMPv6 packet to cause the srxpfe process to crash and restart. Continued receipt and processing of these packets will repeatedly crash the srxpfe process and sustain the Denial of Service (DoS) condition. During NAT64 translation, receipt of a specific, malformed ICMPv6 packet destined to the device will cau…

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Affected Packages1 packages

▶CVEListV5juniper_networks/junos_os21.4 — 21.4R3-S12+11

🔴Vulnerability Details

3
GHSA
GHSA-9cqr-g7fq-8jf6: An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an↗2026-04-10
▶
VulDB
Juniper Junos OS up to 25.2R1-S2 unusual condition (JSA107874)↗2026-04-10
▶
CVEList
Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart.↗2026-04-09
▶
CVE-2026-33790 (HIGH CVSS 8.7) | An Improper Check for Unusual or Ex | cvebase.io