CVE-2026-57032

Name of the Vulnerable Software and Affected Versions Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 versions prior to 23.2R2-S7 Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 versions 23.4 prior to 23.4R2-S8 Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 versions 24.2 prior to 24.2R2-S5 Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 versions 24.4 prior to 24.4R2

Description An improper handling of undefined parameters in the packet forwarding engine (pfe) allows an authenticated attacker with low privileges to cause a Denial-of-Service (DoS). This occurs when a request is made to subscribe to an unsupported telemetry sensor path via gRPC, which causes the Flexible PIC Concentrator (FPC) to crash. This results in a complete service outage until the module automatically restarts.

Recommendations Update Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 to version 23.2R2-S7 or later. Update Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 versions 23.4 to 23.4R2-S8 or later. Update Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 versions 24.2 to 24.2R2-S5 or later. Update Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 versions 24.4 to 24.4R2 or later.