PT-2026-56982
CVE-2026-57028
·
Published
2026-07-09
·
Updated
2026-07-10
Description by
CVSS 3.1
7.3
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Junos OS Evolved versions prior to 23.2R2-EVO
Description
An improper restriction of communication channel to intended endpoints allows an unauthenticated, network-based attacker to cause license exhaustion. Due to incorrect initialization, a process intended for internal communication within the device is accessible over the network via an open port, leading to unauthorized access to license management.
Recommendations
Update Junos OS Evolved to version 23.2R2-EVO or later.
Found an issue in the description? Have something to add? Feel free to write us 👾