Juniper Junos OS iked DoS via VPN negotiation failures (CVE-2026-57024)

Vulnerability Overview Vulnerability Name: Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously (CVE-2026-57024) Vulnerability ID: JSA110084 Date Created: 2026-07-08 Last Updated: 2026-07-08 Severity: Medium CVSS Score: - CVSS v3.1: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) - CVSS v4.0: 6.9 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/SC:N/SU:N/AV:N/RA:N) Affected Products Affected Products: - SRX Series, MX with SPC3 Affected Versions: - All versions prior to 23.2R2-57 - 23.4 versions prior to 23.4R2-56 - 24.2 versions prior to 24.2R2-53 - 24.4 versions prior to 24.4R2-54 - 25.2 versions prior to 25.2R1-51 Remediation Solution: - The following software versions have been updated to resolve this specific issue: Junos OS: 23.2R2-57, 23.4R2-56, 24.2R2-53, 24.4R2-54, 25.2R1-51, 25.2R2, 25.4R1, and later versions. - This issue is tracked under ticket number 1889298 and can be viewed on the Customer Support website. Additional Information Problem Description: - When VPN services are configured on MX and SRX devices equipped with SPC3, a large number of failed VPN negotiations will eventually exhaust the peer index roll-back counter. As a result, new peers are assigned index values that are already in use, causing the process to crash continuously. This leads to the inability to establish new VPN connections and the deletion of existing connections. To restore service, the system must be rebooted. - Please note that the index values cannot be monitored; therefore, customers should monitor up/down events. The issue is more likely to occur if such events persist for an extended period. - To be exposed to this vulnerability, the system must be running (systems running are unaffected). This can be verified using the following command: Workaround: - There are currently no known workarounds to mitigate this issue. Revision History: - 2026-07-08: Initial release Related Links KB16613: Juniper Networks SIRT Quarterly Security Bulletin Publication Process KB16765: In which releases are vulnerabilities fixed? KB16446: Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories Report a Security Vulnerability - How to Contact the Juniper Networks Security Incident Response Team

Goal Reached Thanks to every supporter — we hit 100%!

Juniper Junos OS iked DoS via VPN negotiation failures (CVE-2026-57024)