CVE-2026-57028

High

Description

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion. Due to an incorrect initialization, a process which should only be able to communicate internally within the device, can be reached over the network via an open port. This leads to unauthorized access to the license management. This issue affects all Junos OS Evolved versions before 23.2R2-EVO.

SeverityHigh

CVSS7.3

Exploit probability—

Product

Juniper Junos Os Evolved

PublishedJul 9, 2026

First seenJul 9, 2026

Weakness typeCWE-923CWE-923

How to fix

Update

juniper junos_os_evolved23.2 or later

Vendor advisories

supportportal.juniper.net/JSA110088

Affected products

Product	Affected versions	Fixed in
juniper junos_os_evolved	v < 23.2, 23.2	23.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.