CVE-2026-33803
Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device
CVE-2026-33803: Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an…
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
CVE-2026-33803 at a glance
- CISA KEV
- Not listed (catalog checked )
- Highest advisory severity
- Medium
- CVSS base score
- 6.5 (Juniper)
- Fixed releases
- Juniper: 23.2R2-S7-EVO, 23.4R2-S8-EVO, 24.2R2-S5-EVO, 24.4R2-S4-EVO, 25.2R2-S1-EVO, 25.4R1-S2-EVO
- Vendor advisories
- 2 from Juniper
- VulniPulse record
- Published · Updated
Scores, vectors, weaknesses and fixed releases are quoted from vendor advisories that cover only CVE-2026-33803; bulletin-wide values are not repeated here.
Is CVE-2026-33803 exploited?
No exploitation is reported in the sources VulniPulse tracks: CVE-2026-33803 is not in the CISA KEV catalog (checked ) and no tracked advisory for it reports exploitation. That is not proof the vulnerability cannot be exploited.
How do I fix CVE-2026-33803?
Upgrade to a fixed release named by the vendor:
- Juniper: 23.2R2-S7-EVO, 23.4R2-S8-EVO, 24.2R2-S5-EVO, 24.4R2-S4-EVO, 25.2R2-S1-EVO, 25.4R1-S2-EVO
Vendor advisory comparison
Juniper
2 advisories- Advisory severityMedium6.5
Medium [CVE-2026-102085 +1] Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device
CVE-2026-102085Source published Source updated
This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets. This issue affects Junos OS Evolved: - All versions before 23.2R2-S7.7-EVO; Please note that this issue is similar to but not identical CVE-2026-33803.
- Affected products in this advisory
- Junos OS Evolved
- Source-reported affected versions
- * All versions before 23
- Source-reported fixed versions
- 23.2R2-S7.7-EVO
- 23.4R2-S8.11-EVO
- 24.2R2-S5.6-EVO
- 24.4R2-S4-EVO
2 more entries in the full advisory.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
- Advisory severityMedium6.5
Medium [CVE-2026-33803] Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device
CVE-2026-33803Source published Source updated
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets. This issue affects Junos OS Evolved: - all versions before 23.2R2-S7-EVO,
- Related products — impact not confirmed
- Junos OS Evolved
- Junos OS
- Junos
- Source-reported affected versions
- * all versions before 23
- Source-reported fixed versions
- 23.2R2-S7-EVO
- 23.4R2-S8-EVO
- 24.2R2-S5-EVO
- 24.4R2-S4-EVO
2 more entries in the full advisory.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Browse the latest tracked CVEs or the CVEs listed in CISA KEV.
Android app · Google Play
Monitor future Juniper CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.