CVE-2026-33803

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets. This issue affects Junos OS Evolved: * all versions before 23.2R2-S7-EVO, * 23.4 versions before 23.4R2-S8-EVO, * 24.2 versions before 24.2R2-S5-EVO, * 24.4 versions before 24.4R2-S4-EVO, * 25.2 versions before 25.2R2-S1-EVO, * 25.4 versions before 25.4R1-S2-EVO.

Scoring

Severity

MEDIUM

CVSS base score

6.9

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/AU:Y/R:U/RE:M

EPSS probability

0.35%

CWE

CWE-923

Published

2026-07-09

Last modified

2026-07-10

Affected products

• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS Evolved

Weakness type

• CWE-923

Related vulnerabilities

• CVE-2026-87734 — An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly...
• CVE-2026-62836 — Azure SQL Managed Instance Elevation of Privilege Vulnerability
• CVE-2026-18655 — Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection
• CVE-2026-23904 — Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy
• CVE-2026-63226 — Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement...
• CVE-2026-8920 — Improper Restriction of Communication Channel to Intended Endpoints and External Control of File...
• CVE-2026-59841 — A improper restriction of communication channel to intended endpoints vulnerability in Fortinet...
• CVE-2026-57028 — Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

Markdown version · Browse all CVEs