CVE-2026-57028
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion. Due to incorrect initialization, a process that should only communicate internally can be reached over the network via an open port, leading to unauthorized access to license management.
Risk Assessment
The risk for the organization is that an attacker can exhaust licenses, potentially causing service disruptions or requiring additional license purchases, leading to costs and downtime.
Recommendation
It is recommended to immediately upgrade Junos OS Evolved to version 23.2R2-EVO or later, which includes a fix for this vulnerability.
Other vulnerabilities in Junos OS Evolved
See all- CVE-2026-57029Medium
A missing synchronization vulnerability in the sFlow collector handler of Junos OS Evolved on QFX Series allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS). When the reachability of an sFlow collector changes and the sFlow thread simultaneously accesses next-hop data, the evo-pfemand process crashes, blocking traffic forwarding until automatic restart.
- CVE-2026-33803Medium
A vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause limited information disclosure and availability impact. Due to incorrect initialization, an internal process is exposed over the network via an open port.
- CVE-2026-33794Medium
A vulnerability in the advanced forwarding toolkit (evo-aftmand) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated network-based attacker to generate continuous routing updates, causing the evo-aftmand process on the PFE to crash, leading to a Denial-of-Service (DoS). Successful exploitation depends on a sequence of events outside the attacker's direct control.
- CVE-2026-33788High
Missing authentication for a critical function in FPCs of Junos OS Evolved on PTX series allows a local authenticated attacker with low privileges to gain direct access to FPCs as a high-privileged user, potentially leading to full compromise.
Original NVD description (English source)
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion. Due to an incorrect initialization, a process which should only be able to communicate internally within the device, can be reached over the network via an open port. This leads to unauthorized access to the license management. This issue affects all Junos OS Evolved versions before 23.2R2-EVO.