Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Resolved Issues

Learn about the issues fixed in this release for SRX Series devices.

For the most complete and latest information about known Junos OS defects, use the Juniper Networks online Junos Problem Report Search application.

Application Layer Gateways (ALGs)

  • Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash (CVE-2026-21905). PR1876029

Content Security

  • policy-name added to web filtering syslogs. PR1879364

Chassis Clustering

  • Traffic through ipsec vpn tunnel halts/stops after back to back failover until rekey occurs. PR1842874

  • Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash (CVE-2026-21914). PR1882028

  • ISSU failure and process crash on primary node during HA upgrade. PR1895134

  • Backup node stuck in cold sync failure after FPC (Flexible PIC Concentrators) reset due to PFE crash in SRX chassis cluster. PR1895790

Flow-based and Packet-based Processing

  • Junos MX/SRX flowd Crash After Tunnel Removal Leaves Stale Flows, Causing FPC Reboot. PR1892015

  • SRX drops to-the-box ICMPv6 echo request with sequence number 3503 and 35000 through 35999. PR1892890

  • On the SRX platform the FPC reboots when traffic reaches the FAT IPSec tunnel. PR1903515

General Routing

  • SRX:MNHA:ICL:[Longevity] - MNHA Conn State and ICL are down after 48+ hours of device being up with background traffic. PR1822662

  • Dynamic vlan assignment doesn't work when mvrp is enabled PR1839275

  • The rpd process crashes during ISSU or switchover on all Junos SRX platforms PR1868487

  • The flowd process crash is observed on all Junos SRX platforms in multicast scenario with PIM PR1877771

  • Post Upgrade Junos no longer shows logical system name on show commands followed by logical-system all PR1879698

  • Traffic drops will be observed for any traffic going over the GRE tunnel post the st0 tunnel interface flap PR1880253

  • ISSU getting aborted due to configuration-synchronize failure on Junos SRX platforms PR1882569

  • SRX Firewalls with IOC3 triggers a temperature alert on the FPC 2 PLX PCIe Switch Chip PR1883027

  • Policy match failure for VXLAN EVPN type-5 cross vrf traffic PR1884150

  • SRX1500 HA link fails with copper SFP after upgrade to 24.2 PR1885127

  • Alarms for high usage in /var partition are not generated PR1886757

  • SRX4600 node 1 enters hardware failure during upgrade PR1887000

  • The XE interfaces of SRX380 platform with 1G SFP (fiber) are flapping continuously when LACP is enabled PR1889549

  • IDP installation update fails on secondary node in SRX chassis cluster PR1890791

  • Security logging does not work on SRX platforms when the stream host is configured using FQDN that resolves to an IPv6 address PR1892867

  • SRX configured with a native VLAN ID other than 1 experienced DHCP assignment issues and ARP resolution failures to the default gateway PR1893957

  • On Branch SRX platforms, Power button and Reset Config button do not work as expected PR1895644

  • Packet drops are observed on SRX380 platforms in packet mode PR1897579

  • Skipping processing for smaller files affected fragmented packets PR1899463

  • PFE Crash observed platforms where PKI and SSL-Proxy services are configured PR1901098

  • [SRX_TYPE_5_USECASE] SRX4700 performance improvement for TYPE5 VXLAN scenario PR1901678

  • FPC stuck in network loop scenario PR1905001

  • RIB and the FIB inconsistency results in traffic loss in IPsec scenario with st0 interface configured PR1908681

  • Link status of disabled SFP-T port becomes up after rebooting on SRX1500 PR1910445

  • SRX PFE crash is observed if nexthop limit is reached PR1911845

Infrastructure

  • SRX5600 and SRX5800 SPC3 are going offline after software upgrade PR1879079

Intrusion Detection and Prevention (IDP)

  • Not able to download IDP signature via routing instance PR1883645

J-Web

  • Software upgrade via J-Web does not work on specific SRX platforms while using Upload Package option PR1916722

Layer 2 Ethernet Services

  • Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server (CVE-2025-59960) PR1876407

  • Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable (CVE-2025-59961) PR1877468

MPLS

  • Traffic blackholing in LSPs due to link failure before protection signalling is processed PR1866944

Platform and Infrastructure

  • In SRX high availability cluster, RG0 failover to secondary node fails as srxpfe daemons failed to reconnect to routing-engine on secondary PR1904267

Routing Policy and Firewall Filters

  • On SRX platform, flowd process is generating crash files PR1882193

  • Policy configuration failure causes the srxpfe process to crash PR1888456

  • Support IPv6 in address book address range PR1892746

  • SRX5K traffic disruption due to REPFE policy sync issues from FQDN and file-serialization Errors PR1894033

  • SRX and MX-SPC3: While Downgrading from 25.4/24.4R2/25.2R2/25.3R1 image with address book IPV4 range config, image installation validation is failing. PR1899519

Routing Protocols

  • Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash (CVE-2025-60003) PR1878812

  • Scaled BGP sessions remain in the Idle state after interface rollback. PR1880630

  • Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap (CVE-2025-60011) PR1884492

Services Applications

  • On-Box IPv6 packet capture support. PR1880090

User Interface and Configuration

  • The error message will be seen on CLI when 'clear log messages' command is issued. PR1914952

VPNs

  • Added more flags to "ike traceoptions flag" configuration statement. PR1804885

  • The ARI-TS routes are on dead state in the forwarding table post chassis-control restart on the MNHA scenario. PR1861056

  • The iked process crashes due to continuous activate and deactivate of VPN configuration. PR1869875

  • On SRX devices running Multi-Node High Availability (MNHA), the iked process crashed due to repeated negotiation failures, which led to a VPN outage. PR1889298

  • The IKE process is repeatedly crashing on MNHA scenario with per-tunnel debugging enabled. PR1890976

  • IKE Processing Order Causing Gateway Misconfiguration and Tunnel Failures. PR1892539

  • Cluster nodes generate KMD core during RG0 failover with ADVPN shortcuts PR1922670