CVE Feed

    Dashboard / CVE / CVE-2026-33803

    CVE-2026-33803

    An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets. This issue affects Junos OS Evolved: * all versions before 23.2R2-S7-EVO, * 23.4 versions before 23.4R2-S8-EVO, * 24.2 versions before 24.2R2-S5-EVO, * 24.4 versions before 24.4R2-S4-EVO, * 25.2 versions before 25.2R2-S1-EVO, * 25.4 versions before 25.4R1-S2-EVO.

    Published:Jul 9, 2026
    Last Modified:Jul 10, 2026
    EPS:Jul 9, 2026
    EPSS Score:0.00354
    CVSS Score:6.5

    Affected Products

    Vendor
    Juniper Networks
    Product
    Junos Os Evolved

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-57029 (CVSS 6) — A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on …
    CVE-2026-57028 (CVSS 6.9) — An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos…
    CVE-2026-57025 (CVSS 6.8) — A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Ju…
    CVE-2026-33801 (CVSS 7.1) — An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of …
    CVE-2026-33799 (CVSS 5.3) — An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evol…
    CVE-2026-33794 (CVSS 8.2) — An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (ev…
    CVE-2026-21901 (CVSS 6.7) — A NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos…
    CVE-2026-33791 (CVSS 8.4) — An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved …
    CVE-2026-33783 (CVSS 7.1) — A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos O…
    CVE-2026-33776 (CVSS 6.8) — A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a lo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High