CVE-2026-102085
CVE-2026-102085 is covered by the Juniper CVE-2026-102085 security bulletin. Not in the CISA KEV catalog. Medium advisory severity. 1 advisory from Juniper.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
CVE-2026-102085 at a glance
- CISA KEV
- Not listed (catalog checked )
- Highest advisory severity
- Medium
- Vendor advisories
- 1 from Juniper
- VulniPulse record
- Published · Updated
Is CVE-2026-102085 exploited?
No exploitation is reported in the sources VulniPulse tracks: CVE-2026-102085 is not in the CISA KEV catalog (checked ) and no tracked advisory for it reports exploitation. That is not proof the vulnerability cannot be exploited.
How do I fix CVE-2026-102085?
This CVE is tracked through a multi-CVE bulletin, so its fixed releases may differ from the bulletin-wide values below. Check the vendor source.
Vendor advisory comparison
Juniper
1 advisory- Advisory severityMedium6.5
Medium [CVE-2026-102085 +1] Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device
CVE-2026-102085Source published Source updated
This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets. This issue affects Junos OS Evolved: - All versions before 23.2R2-S7.7-EVO; Please note that this issue is similar to but not identical CVE-2026-33803.
- Affected products in this advisory
- Junos OS Evolved
- Source-reported affected versions
- * All versions before 23
- Source-reported fixed versions
- 23.2R2-S7.7-EVO
- 23.4R2-S8.11-EVO
- 24.2R2-S5.6-EVO
- 24.4R2-S4-EVO
2 more entries in the full advisory.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Browse the latest tracked CVEs or the CVEs listed in CISA KEV.
Android app · Google Play
Monitor future Juniper CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.