{"schema":"threatline.record/2","record":{"id":"CVE-2026-102037","aliases":[],"summary":"Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used","details":"An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server.","categories":["Network & edge"],"product":"Junos OS","vendor":"Juniper Networks","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102037","source_modified_at":"2026-10-16T16:38:07.655Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Junos OS","vendor":"Juniper Networks","versions":[{"lessThan":"23.4R2-S8.13","status":"affected","version":"23.4","versionType":"custom"},{"lessThan":"24.2R2-S5.5","status":"affected","version":"24.2","versionType":"custom"},{"lessThan":"24.4R2-S5","status":"affected","version":"24.4","versionType":"custom"},{"lessThan":"25.2R2-S2","status":"affected","version":"25.2","versionType":"custom"},{"lessThan":"25.4R1-S3","status":"affected","version":"25.4","versionType":"custom"},{"lessThan":"26.2R1-S2","status":"affected","version":"26.2","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102037","source_modified_at":"2026-10-16T16:38:07.655Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"23.4R2-S8.13","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102037","source_modified_at":"2026-10-16T16:38:07.655Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"24.2R2-S5.5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102037","source_modified_at":"2026-10-16T16:38:07.655Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"24.4R2-S5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102037","source_modified_at":"2026-10-16T16:38:07.655Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"25.2R2-S2","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102037","source_modified_at":"2026-10-16T16:38:07.655Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"25.4R1-S3","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102037","source_modified_at":"2026-10-16T16:38:07.655Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Junos OS","ecosystem":null},"version":"26.2R1-S2","basis":"first unaffected version stated in the CVE record"}],"cvss":8.1,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00482,"percentile":0.40624,"score_date":"2026-10-23"},"published_at":"2026-10-14T16:51:08.141Z","modified_at":"2026-10-16T16:38:07.655Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-102037","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-16T16:38:07.655Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-102037","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://supportportal.juniper.net/JSA112186","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-10-16T16:37:57.878240Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-16T16:38:07.655Z","content_hash":"885da9d4c3da706d3deaaba3f9d0c06dfde7d1766e25c42eb175ef669111d3ba"}}