Improper Communication Restriction in Junos OS Evolved by Juniper Networks
CVE-2026-33803

6.9MEDIUM

Key Information:

Vendor

Juniper Networks
Status
Junos Os Evolved
Vendor
CVE Published:
9 July 2026

Badges

👾 Exploit Exists

What is CVE-2026-33803?

Junos OS Evolved by Juniper Networks has a communication vulnerability that allows unauthenticated network-based attackers to potentially disclose limited information and impact the device's availability. This flaw arises due to improper initialization, permitting external access to internal processes via an open port. Such exposure can lead to increased CPU usage from processing ingress packets, compromising overall device performance. It's crucial for users to update their systems to the specified secure versions to mitigate these risks.

Affected Version(s)

Junos OS Evolved 0 < 23.2R2-S7-EVO

Junos OS Evolved 23.4 < 23.4R2-S8-EVO

Junos OS Evolved 24.2 < 24.2R2-S5-EVO

References

https://supportportal.juniper.net/JSA110078
vendor-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.