CVE-2026-57054

Name of the Vulnerable Software and Affected Versions Junos OS on MX Series versions prior to 23.2R2-S7 Junos OS on MX Series versions 23.4 through 23.4R2-S8 Junos OS on MX Series versions 24.2 through 24.2R2-S5 Junos OS on MX Series versions 24.4 through 24.4R2-S4 Junos OS on MX Series versions 25.2 through 25.2R2-S1 Junos OS on MX Series versions 25.4 through 25.4R1-S2 Junos OS on MX Series version 25.4R2

Description A Use of Incorrectly-Resolved Name or Reference issue in the URL filtering plugin allows an unauthenticated, network-based attacker to bypass web filtering. By sending a request with a specifically formatted URL, the attacker can ensure the request is forwarded even if the system is configured to block it, enabling access to downstream resources that should be unreachable.

Recommendations Update to version 23.2R2-S7 or later. Update to version 23.4R2-S8 or later. Update to version 24.2R2-S5 or later. Update to version 24.4R2-S4 or later. Update to version 25.2R2-S1 or later. Update to version 25.4R1-S2 or later.