CVE-2026-57029: Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash

Published Jul 9, 2026
·
Updated

A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service (DoS).

When the reachability of an sFlow collector changes, the corresponding next-hop entry is updated. If this update occurs simultaneously with the sFlow thread accessing the next-hop data (which is outside the attackers control), it causes the evo-pfemand process to crash, impacting all traffic forwarding until the automatic process restart has completed.

This issue affects Junos OS Evolved on QFX Series:

all 23.2 versions,  23.4 versions before 23.4R2-S7-EVO, 24.2 versions before 24.2R2-S5-EVO, 24.4 versions before 24.4R2-S3-EVO, 25.2 versions before 25.2R2-EVO.

Affected Software

46 affected components
Juniper Networks Junos OS Evolved on QFX Series>=23.2<=23.2, <23.4R2-S7-EVO, <24.2R2-S5-EVO, <24.4R2-S3-EVO, <25.2R2-EVO
All of the following
Any of the following
Juniper Junos OS Evolved=23.2
Juniper Junos OS Evolved=23.4
Juniper Junos OS Evolved=23.4-r1
Juniper Junos OS Evolved=23.4-r1-s1
Juniper Junos OS Evolved=23.4-r1-s2
Juniper Junos OS Evolved=23.4-r2
Juniper Junos OS Evolved=23.4-r2-s1
Juniper Junos OS Evolved=23.4-r2-s2
Juniper Junos OS Evolved=23.4-r2-s3
Juniper Junos OS Evolved=23.4-r2-s4
Juniper Junos OS Evolved=23.4-r2-s5
Juniper Junos OS Evolved=23.4-r2-s6
Juniper Junos OS Evolved=24.2
Juniper Junos OS Evolved=24.2-r1
Juniper Junos OS Evolved=24.2-r1-s2
Juniper Junos OS Evolved=24.2-r2
Juniper Junos OS Evolved=24.2-r2-s1
Juniper Junos OS Evolved=24.2-r2-s2
Juniper Junos OS Evolved=24.2-r2-s3
Juniper Junos OS Evolved=24.2-r2-s4
Juniper Junos OS Evolved=24.4
Juniper Junos OS Evolved=24.4-r1
Juniper Junos OS Evolved=24.4-r1-s2
Juniper Junos OS Evolved=24.4-r1-s3
Juniper Junos OS Evolved=24.4-r2
Juniper Junos OS Evolved=24.4-r2-s1
Juniper Junos OS Evolved=24.4-r2-s2
Juniper Junos OS Evolved=25.2
Juniper Junos OS Evolved=25.2-r1
Juniper Junos OS Evolved=25.2-r1-s1
Juniper Junos OS Evolved=25.2-r1-s2
Any of the following
Juniper QFX10008
Juniper QFX10016
Juniper QFX5110
Juniper QFX5120
Juniper Qfx5130
Juniper Qfx5140
Juniper QFX5200
Juniper QFX5210
Juniper QFX5220
Juniper Qfx5230-64cd
Juniper Qfx5240
Juniper Qfx5241
Juniper Qfx5250
Juniper Qfx5700

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Juniper Networks Junos OS Evolved (QFX Series) to a version that resolves this vulnerability.

    Fixed in 23.4R2-S7-EVO
  2. Upgrade

    Upgrade Juniper Networks Junos OS Evolved (QFX Series) to a version that resolves this vulnerability.

    Fixed in 24.2R2-S5-EVO
  3. Upgrade

    Upgrade Juniper Networks Junos OS Evolved (QFX Series) to a version that resolves this vulnerability.

    Fixed in 24.4R2-S3-EVO
  4. Upgrade

    Upgrade Juniper Networks Junos OS Evolved (QFX Series) to a version that resolves this vulnerability.

    Fixed in 25.2R2-EVO
  5. Upgrade

    Upgrade Juniper Networks Junos OS Evolved (QFX Series) to a version that resolves this vulnerability.

    Fixed in 25.4R1-EVO

Event History

Jul 9, 2026
CVE Published
via MITRE·09:12 PM
Data Sourced
via MITRE·09:12 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-57029?

The severity of CVE-2026-57029 is medium with a score of 5.3.

2

How do I fix CVE-2026-57029?

To fix CVE-2026-57029, ensure you update your Junos OS Evolved on QFX Series to the latest patched version.

3

What systems are affected by CVE-2026-57029?

CVE-2026-57029 affects Juniper Networks Junos OS Evolved specifically on QFX Series hardware.

4

What type of vulnerability is CVE-2026-57029?

CVE-2026-57029 is classified as a Missing Synchronization vulnerability.

5

What impact does CVE-2026-57029 have?

The impact of CVE-2026-57029 is a Denial-of-Service (DoS) that can be triggered by an adjacent, unauthenticated attacker.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203