Is CVE-2026-102037 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102037?

CVE-2026-102037 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-102037

Description

An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server.