Description
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device.

Due to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets.
This issue affects Junos OS Evolved:


* All versions before 23.2R2-S7.7-EVO;
* 23.4 versions before 23.4R2-S8.11-EVO;
* 24.2 versions before 24.2R2-S5.6-EVO;
* 24.4 versions before 24.4R2-S4-EVO;
* 25.2 version before 25.2R2-S1-EVO;
* 25.4 versions before 25.4R1-S1-EVO.





Please note that this issue is similar to but not identical CVE-2026-33803.
Published: 2026-10-14
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information disclosure and availability disruption via an exposed internal process
Action: Immediate Patch
AI Analysis

Impact

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Junos OS Evolved allows an unauthenticated network attacker to reach a process that should remain internal through an accidentally exposed port. Querying that process can reveal limited internal state and trigger increased CPU usage, which may degrade device availability. This weakness corresponds to CWE‑923 and undermines the security of the control plane.

Affected Systems

All releases of Junos OS Evolved before 23.2R2‑S7.7‑EVO, before 23.4R2‑S8.11‑EVO, before 24.2R2‑S5.6‑EVO, before 24.4R2‑S4‑EVO, before 25.2R2‑S1‑EVO, and before 25.4R1‑S1‑EVO are affected. These versions expose a previously internal process via an unintentionally open port, creating the described risks.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity. The EPSS score is less than 1%, suggesting a low exploitation probability, yet the lack of authentication and network accessibility lowers the attack barrier. The vulnerability is not listed in CISA KEV. Attackers can target the mistakenly exposed port, causing increased CPU usage and potential service degradation. Restricting the control plane to authorized endpoints mitigates the risk.

Generated by OpenCVE AI on October 15, 2026 at 17:16 UTC.

Remediation

Vendor Solution

The following software releases have been updated to resolve this specific issue: Junos OS Evolved: 23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO, 24.2R2-S5.6-EVO, 24.4R2-S4-EVO, 25.2R2-S1-EVO, 25.4R1-S1-EVO, 26.2R1-EVO, and all subsequent releases. Note: For Junos OS Evolved releases 23.2-EVO, 23.4-EVO, and 24.2-EVO, specific respins have been referenced. Previously published versions of these releases have been rebuilt to resolve the security vulnerabilities identified in this advisory.

Vendor Workaround

There are no known workarounds for this issue. Please ensure that your control plane protection only explicitly permits access to ports intended to be reachable and only from authorized endpoints. All other traffic destined to the control plane should be disallowed.

OpenCVE Recommended Actions

  • Upgrade the device to Junos OS Evolved 23.2R2‑S7.7‑EVO or any newer patched release listed in the vendor advisory.
  • Apply an access control list to the control plane so that only authorized endpoints can reach the designated ports and block all other inbound traffic.
  • Verify that no additional ports are inadvertently exposed by inspecting the device configuration and disabling or restricting any that are not required.

Generated by OpenCVE AI on October 15, 2026 at 17:16 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 17 Oct 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Juniper Networks
Juniper Networks junos Os Evolved
Vendors & Products Juniper Networks
Juniper Networks junos Os Evolved

Thu, 15 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 14 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Description An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets. This issue affects Junos OS Evolved: * All versions before 23.2R2-S7.7-EVO; * 23.4 versions before 23.4R2-S8.11-EVO; * 24.2 versions before 24.2R2-S5.6-EVO; * 24.4 versions before 24.4R2-S4-EVO; * 25.2 version before 25.2R2-S1-EVO; * 25.4 versions before 25.4R1-S1-EVO. Please note that this issue is similar to but not identical CVE-2026-33803.
Title Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
Weaknesses CWE-923
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/AU:Y/R:U'}

Subscriptions

Juniper Networks Junos Os Evolved
cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published:

Updated: 2026-10-14T20:46:20.247Z

Reserved: 2026-09-28T17:37:38.548Z

Link: CVE-2026-102085

cve-icon Vulnrichment

Updated: 2026-10-14T20:39:30.120Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-14T17:18:04.477

Modified: 2026-10-15T16:24:19.073

Link: CVE-2026-102085

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-17T01:00:13Z

Weaknesses
  • CWE-923

    Improper Restriction of Communication Channel to Intended Endpoints