CVE-2026-57028: Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion.
Due to an incorrect initialization, a process which should only be able to communicate internally within the device, can be reached over the network via an open port. This leads to unauthorized access to the license management.
This issue affects all Junos OS Evolved versions before 23.2R2-EVO.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 23.2R2-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 23.4R1-EVO - Compensating control
Ensure the inadvertently exposed port mentioned in the advisory is not reachable from the network (restrict inbound access to that port using network controls/firewall rules) until the affected Junos OS Evolved version is upgraded.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57028?
The severity of CVE-2026-57028 is classified as high with a score of 7.3.
How do I fix CVE-2026-57028?
To fix CVE-2026-57028, ensure proper configuration of the affected ports to prevent unauthorized access.
What impact can CVE-2026-57028 have on my system?
CVE-2026-57028 can allow an unauthenticated attacker to cause license exhaustion on the Junos OS Evolved.
Is CVE-2026-57028 exploitable remotely?
Yes, CVE-2026-57028 can be exploited by a remote, unauthenticated attacker.
What steps can I take to mitigate CVE-2026-57028?
To mitigate CVE-2026-57028, regularly audit your network configurations to identify and secure inadvertently exposed ports.