EIP-2026-108936

PRE-CVE

Juniper-SRX-Firewalls&EX-switches - (PreAuth-RCE) (PoC)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-108936. PoCs published by whiteOwl.

AI-analyzed exploit summary This script exploits CVE-2023-36845 in Juniper SRX firewalls and EX switches by injecting a PHP payload via the PHPRC environment variable to execute phpinfo(), confirming vulnerability and leaking PHP configuration.

Description

Juniper-SRX-Firewalls&EX-switches - (PreAuth-RCE) (PoC)

Exploits (1)

exploitdb WORKING POC
by whiteOwl · pythonwebappsphp
https://www.exploit-db.com/exploits/51776

This script exploits CVE-2023-36845 in Juniper SRX firewalls and EX switches by injecting a PHP payload via the PHPRC environment variable to execute phpinfo(), confirming vulnerability and leaking PHP configuration.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Juniper SRX Firewalls & EX Switches (versions prior to 20.4R3-S9, 21.1R1, 21.2R3-S7, 21.3R3-S5, 21.4R3-S5, 22.1R3-S4, 22.2R3-S2, 22.3R2-S2/R3-S1, 22.4R2-S1/R3, 23.2R1-S1/R2)
No auth needed
Prerequisites: Network access to the target device · PHP configuration allowing URL include and auto_prepend_file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026