CVE Feed

    Dashboard / CVE / CVE-2026-57028

    CVE-2026-57028

    An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion. Due to an incorrect initialization, a process which should only be able to communicate internally within the device, can be reached over the network via an open port. This leads to unauthorized access to the license management. This issue affects all Junos OS Evolved versions before 23.2R2-EVO.

    Published:Jul 9, 2026
    Last Modified:Jul 10, 2026
    EPS:Jul 9, 2026
    EPSS Score:0.00301
    CVSS Score:7.3

    Affected Products

    Vendor
    Juniper Networks
    Product
    Junos Os Evolved

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-57029 (CVSS 6) — A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on …
    CVE-2026-57025 (CVSS 6.8) — A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Ju…
    CVE-2026-33803 (CVSS 6.9) — An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos…
    CVE-2026-33801 (CVSS 7.1) — An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of …
    CVE-2026-33799 (CVSS 5.3) — An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evol…
    CVE-2026-33794 (CVSS 8.2) — An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (ev…
    CVE-2026-21901 (CVSS 6.7) — A NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos…
    CVE-2026-33791 (CVSS 8.4) — An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved …
    CVE-2026-33783 (CVSS 7.1) — A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos O…
    CVE-2026-33776 (CVSS 6.8) — A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a lo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High