# CVE-2026-102037: Juniper Junos OS XML injection in Unified Threat Management daemon

Source: https://junglewise.ai/threats/cve-2026-102037-an-xml-injection-vulnerability-in-the-unified-threat-management  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-14. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-102037 · Severity: high · CVSS 8.1 · Published 2026-10-14

The Unified Threat Management daemon in Juniper's Junos OS security operating system processes XML feeds from configured URL sources without proper input validation. An attacker can intercept or forge responses from these feed servers to inject malicious configuration commands, taking full control of the device's security policies and settings.

Technologies: [Juniper Networks Junos OS](https://junglewise.ai/threats/technologies/juniper-networks-junos-os). Vendors: [Juniper Networks](https://junglewise.ai/threats/vendors/juniper-networks).

## Quick answers

**Is CVE-2026-102037 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-102037 being exploited in the wild.

**How severe is CVE-2026-102037?** High severity, with a CVSS score of 8.1, published 14 October 2026.

**Which products and versions are affected?** Juniper Networks Junos OS SRX Series devices.

**Is there a fix for CVE-2026-102037?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-102037 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2026-102037?** Check whether you run Juniper Networks Junos OS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An XML injection vulnerability in the utmd daemon allows an unauthenticated network attacker to inject arbitrary XML into device configuration by crafting a malicious response from a configured custom URL-feed server. The attack requires network access to the feed channel and exploits insufficient XML parsing safeguards. A successful exploit grants root-level configuration privileges and full device compromise.

## Affected products

- Juniper Networks Junos OS SRX Series devices

## Timeline

- 2026-10-14: disclosed

## References

- [https://supportportal.juniper.net/JSA112186](https://supportportal.juniper.net/JSA112186)

## Related threats

- [Juniper Networks Junos OS stack buffer overflow in BGP/EVPN](https://junglewise.ai/threats/cve-2026-101982-a-stack-based-buffer-overflow-vulnerability-in-the-routing)
- [Juniper Networks Junos OS stack buffer overflow in rpd](https://junglewise.ai/threats/cve-2026-101981-a-stack-based-buffer-overflow-vulnerability-in-the-routing)
- [Juniper Junos OS routing protocol daemon crash in ISO-VPN](https://junglewise.ai/threats/cve-2026-101952-an-improper-validation-of-consistency-within-input-vulnerability)
- [Juniper Networks Junos OS stack buffer overflow in BGP routing daemon](https://junglewise.ai/threats/cve-2026-102178-a-stack-based-buffer-overflow-vulnerability-in-the-bgp-routing)
- [Juniper Junos buffer overflow in SDK service process](https://junglewise.ai/threats/cve-2026-102176-a-buffer-copy-without-checking-size-of-input-classic-buffer)