CVE-2026-57032 Details
Description
An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker with low privileges to cause a Denial-of-Service (DoS). If an attempt is made to subscribe to an unsupported telemetry sensor path on EX2300, EX3400, EX4000, EX4100 and EX4400 via gRPC, this causes the FPC to crash. This leads to a complete service outage until the module has automatically restarted. The following log message can be seen when this issue happens: agentd[<PID>]: AGENTD_RESOURCE_NOT_FOUND: No resource name found for <sensor> This issue affects Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 devices: * all versions before 23.2R2-S7, * 23.4 versions before 23.4R2-S8, * 24.2 versions before 24.2R2-S5, * 24.4 versions before 24.4R2.
A vulnerability in the packet forwarding engine of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker with low privileges to cause a denial-of-service condition. The issue arises when an unsupported telemetry sensor path is subscribed to via gRPC on EX2300, EX3400, EX4000, EX4100, and EX4400 devices. This subscription attempt causes the FPC process to crash, leading to a complete service outage until the module automatically restarts. The log message 'AGENTD_RESOURCE_NOT_FOUND: No resource name found for <sensor>' is generated when this issue occurs.
Users can upgrade to Junos OS versions 23.2R2-S7, 23.4R2-S8, 24.2R2-S5, 24.4R2, 25.2R1, or any subsequent release. To limit access to the device and reduce the risk of exploitation, use access lists or firewall filters to allow access only from trusted hosts and administrators.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://supportportal.juniper.net/JSA110092 | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-236 | Improper Handling of Undefined Parameters | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| juniper junos | < 23.2 23.2 - 23.2 r1 23.2 r1-s1 23.2 r1-s2 23.2 r2 23.2 r2-s1 23.2 r2-s2 23.2 r2-s3 23.2 r2-s4 23.2 r2-s5 23.2 r2-s6 23.4 - 23.4 r1 23.4 r1-s1 23.4 r1-s2 23.4 r2 23.4 r2-s1 23.4 r2-s2 23.4 r2-s3 23.4 r2-s4 23.4 r2-s5 23.4 r2-s6 23.4 r2-s7 24.2 - 24.2 r1 24.2 r1-s1 24.2 r1-s2 24.2 r2 24.2 r2-s1 24.2 r2-s2 24.2 r2-s3 24.2 r2-s4 24.4 - 24.4 r1 24.4 r1-s2 24.4 r1-s3 |
CPE
Remediation
| |
| juniper ex2300 | All versions |
CPE
Remediation
| |
| juniper ex2300-c | All versions |
CPE
Remediation
| |
| juniper ex3400 | All versions |
CPE
Remediation
| |
| juniper ex4000 | All versions |
CPE
Remediation
| |
| juniper ex4100 | All versions |
CPE
Remediation
| |
| juniper ex4100-f | All versions |
CPE
Remediation
| |
| juniper ex4100-h | All versions |
CPE
Remediation
| |
| juniper ex4100-h-12t | All versions |
CPE
Remediation
| |
| juniper ex4400 | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 13, 2026 | Initial Analysis | [email protected] |
| Jul 10, 2026 | CVE Modified | CISA-ADP |
| Jul 9, 2026 | New CVE Received | [email protected] |