Improper Restriction of Communication Channel in Juniper Networks Junos OS Evolved
CVE-2026-57028

6.9MEDIUM

Key Information:

Vendor

Juniper Networks
Status
Junos Os Evolved
Vendor
CVE Published:
9 July 2026

Badges

👾 Exploit Exists

What is CVE-2026-57028?

An improper restriction of communication channel within Juniper Networks Junos OS Evolved exposes an internal process to unauthorized external network access. This misconfiguration allows unauthenticated attackers to interact with a license management system, leading to potential license exhaustion. It is imperative for users to upgrade to versions 23.2R2-EVO or later to mitigate this vulnerability.

Affected Version(s)

Junos OS Evolved 0 < 23.2R2-EVO

References

https://supportportal.juniper.net/JSA110088
vendor-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.