Junos OS Evolved, Junos OS: limit execution permissions

Published · Updated · Digital strategy · 6 min read · By Cyber Intelligence Embassy

At a glance

Junos OS Evolved, Junos OS: code execution. This 2026-07-14 case examines 31 version entries and 23 CVEs, documented releases and checks suited to network access, using CERTFR-2026-AVI-0852.

AI illustration: a dark cybersecurity technology space with restrained golden lighting Illustration · fictional scene
In this article

Retrospective for 2026-07-14, compiled on 27 October 2026. The date identifies the day being analysed; source publication and revision dates are recorded below.

What this advisory changes in your environment

The starting point is CERTFR-2026-AVI-0852, published on 2026-07-09. Its scope includes Junos OS Evolved, Junos OS, CTPView, Network Director, Junos Space, cRPD. Reported consequences are denial of service, code execution, impact requiring vendor clarification, security control bypass, loss of confidentiality. These statements apply to the advisory’s scope; they do not assign every consequence to every product or CVE.

This case contains 31 version entries; CVE identifier count: 23. Track remediation by component: a successful overall update does not demonstrate that Junos OS Evolved and cRPD each received their respective fix.

Products and versions to examine

Reference
CERTFR-2026-AVI-0852
Source first published
2026-07-09
Latest source revision available for this day
2026-07-09
Named components
Junos OS Evolved, Junos OS, CTPView, Network Director, Junos Space, cRPD
CVE identifiers
CVE-2026-57022, CVE-2026-57028, CVE-2020-7450, CVE-2026-33801, CVE-2026-57029, CVE-2026-57023, CVE-2026-57026, CVE-2026-57019, CVE-2026-21901, CVE-2026-33799, CVE-2026-57025, CVE-2026-57031, CVE-2026-57021, CVE-2026-57030, CVE-2026-57054, CVE-2026-57024, CVE-2026-33802, CVE-2026-57020, CVE-2026-33803, CVE-2026-33800, CVE-2026-57027, CVE-2026-33794, CVE-2026-57032
ComponentPublished condition
Junos OS Evolved22.2R3-x : < 22.2R3-S4-EVO
Junos OS21.4R3-x : < 21.4R3-S7
Junos OS Evolved24.2R2-x : < 24.2R2-S5-EVO
Junos OS Evolved23.4R2-x : < 23.4R2-S8-EVO
CTPView< 9.3R2-3
Network Director< 7.1R3
Junos OS Evolved22.4R3-x : < 22.4R3-S9-EVO
Junos OS25.2R2-x : < 25.2R2-S1
Junos OS25.2R1-x : < 25.2R1-S2
Junos OS Evolved25.4R1-x : < 25.4R1-S2-EVO
Junos OS Evolved22.3R3-x : < 22.3R3-S3-EVO
Junos OS23.4R2-x : < 23.4R2-S8
Junos OS23.2R2-x : < 23.2R2-S7
Junos OS Evolved24.4R1-x : < 24.4R1-S3-EVO
Junos Space< 26.1R1 Patch V1
Junos OS Evolved21.4R3-x : < 21.4R3-S7-EVO
Junos OS21.2R3-x : < 21.2R3-S8
Junos OS25.4R1-x : < 25.4R1-S2
Junos OS22.2R3-x : < 22.2R3-S4
Junos OS Evolved21.2R3-x : < 21.2R3-S8-EVO
Junos OS Evolved24.4R2-x : < 24.4R2-S4-EVO
Junos OS22.4R3-x : < 22.4R3-S10
Junos OS22.3R3-x : < 22.3R3-S5
Junos OS22.1R3-x : < 22.1R3-S6
Junos OS24.4R1-x : < 24.4R1-S2
Junos OS24.4R2-x : < 24.4R2-S4
Junos OS Evolved25.2R2-x : < 25.2R2-S1-EVO
Junos OS Evolved23.2R2-x : < 23.2R2-S7-EVO
Junos OS24.2R2-x : < 24.2R2-S5
Junos OS Evolved25.2R1-x : < 25.2R1-S1-EVO
cRPD< 26.2R1

For Junos OS Evolved, the published condition is “22.2R3-x : < 22.2R3-S4-EVO”. Compare the version actually loaded with that condition within its own release branch. A fix installed on another edition of Junos OS Evolved, Junos OS does not close this case.

Mechanism and prerequisites

Execution context matters as much as the flaw’s name. Distinguish operations available to a local user from those exposed remotely, then examine the permissions and secrets of the affected process.

The primary record CVE-2026-57022, published by juniper, covers Junos OS. The retained revision is dated 2026-07-10. Its scope is presented separately from the integrations and product groupings in CERTFR-2026-AVI-0852.

The published metric for CVE-2026-57022 is CVSS 4.0, 8.2/10. The vector below describes technical prerequisites; it does not measure attack frequency or the likelihood that your deployment is compromised.

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/R:A/RE:M

Attack vector
network
Prior privileges
none
User interaction
none
Complexity
low
Additional attack requirements
present
Weakness
CWE-754

Choose the appropriate intervention

  1. Locate Junos OS Evolved instances, running releases and service owners. Record condition 22.2R3-x : < 22.2R3-S4-EVO in the ticket alongside reference CERTFR-2026-AVI-0852.
  2. Compare the installed branch with the vendor’s Junos OS Evolved release notes. Prepare the package for that branch and a dependent-service test, retaining the pre-change state.
  3. After changing Junos OS Evolved, capture the loaded version again and verify the workflow below. Any exception needs an owner, an exposure-reduction measure and an expiry date.

Verify the fix in a real workflow

Validation scenario to adapt for Junos OS Evolved, Junos OS: For Junos OS Evolved, test an authorised business flow from each zone reaching the service and confirm management restrictions. If a redundant pair exists, verify both nodes and rule persistence after failover during a planned maintenance window. This is a proposed defensive check, not a claim that testing was performed against third-party systems.

Limit of case CERTFR-2026-AVI-0852: this analysis replaces neither vendor prerequisites nor investigation of your logs. Only documented versions are reproduced; no attack date or victim is invented.

Questions specific to this case

Which condition should be checked for Junos OS Evolved?

Advisory CERTFR-2026-AVI-0852 states: Junos OS Evolved — 22.2R3-x : < 22.2R3-S4-EVO. Check the edition and running release; do not extend the published boundary to branches absent from the advisory.

Why not use one fix for Junos OS Evolved and cRPD?

CERTFR-2026-AVI-0852 distinguishes these components within a scope containing 31 entries. Match each branch to its own update documentation and functional check.

Which prerequisites does record CVE-2026-57022 specify?

For CVE-2026-57022, the published vector is CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/R:A/RE:M. Verify those conditions on Junos OS before applying them to an integration named in CERTFR-2026-AVI-0852.

Sources and related reading

Practical guide : Software inventory: prepare for end of support

Explore the decision addressed in this case

Complete source advisory inventory

The article table may be an extract. These lists contain every affected-system entry and CVE in the specified advisory revision. They are not an inventory of your assets and do not map every CVE to every product.

Official source · CERTFR-2026-AVI-0852
Advisory revision : · Checked on :

Affected systems · 31

Original French wording is retained to avoid ambiguous translations of version conditions.

  1. Junos OS Evolved versions 22.2R3-x antérieures à 22.2R3-S4-EVO
  2. Junos OS versions 21.4R3-x antérieures à 21.4R3-S7
  3. Junos OS Evolved versions 24.2R2-x antérieures à 24.2R2-S5-EVO
  4. Junos OS Evolved versions 23.4R2-x antérieures à 23.4R2-S8-EVO
  5. CTPView versions antérieures à 9.3R2-3
  6. Network Director versions antérieures à 7.1R3
  7. Junos OS Evolved versions 22.4R3-x antérieures à 22.4R3-S9-EVO
  8. Junos OS versions 25.2R2-x antérieures à 25.2R2-S1
  9. Junos OS versions 25.2R1-x antérieures à 25.2R1-S2
  10. Junos OS Evolved versions 25.4R1-x antérieures à 25.4R1-S2-EVO
  11. Junos OS Evolved versions 22.3R3-x antérieures à 22.3R3-S3-EVO
  12. Junos OS versions 23.4R2-x antérieures à 23.4R2-S8
  13. Junos OS versions 23.2R2-x antérieures à 23.2R2-S7
  14. Junos OS Evolved versions 24.4R1-x antérieures à 24.4R1-S3-EVO
  15. Junos Space versions antérieures à 26.1R1 Patch V1
  16. Junos OS Evolved versions 21.4R3-x antérieures à 21.4R3-S7-EVO
  17. Junos OS versions 21.2R3-x antérieures à 21.2R3-S8
  18. Junos OS versions 25.4R1-x antérieures à 25.4R1-S2
  19. Junos OS versions 22.2R3-x antérieures à 22.2R3-S4
  20. Junos OS Evolved versions 21.2R3-x antérieures à 21.2R3-S8-EVO
  21. Junos OS Evolved versions 24.4R2-x antérieures à 24.4R2-S4-EVO
  22. Junos OS versions 22.4R3-x antérieures à 22.4R3-S10
  23. Junos OS versions 22.3R3-x antérieures à 22.3R3-S5
  24. Junos OS versions 22.1R3-x antérieures à 22.1R3-S6
  25. Junos OS versions 24.4R1-x antérieures à 24.4R1-S2
  26. Junos OS versions 24.4R2-x antérieures à 24.4R2-S4
  27. Junos OS Evolved versions 25.2R2-x antérieures à 25.2R2-S1-EVO
  28. Junos OS Evolved versions 23.2R2-x antérieures à 23.2R2-S7-EVO
  29. Junos OS versions 24.2R2-x antérieures à 24.2R2-S5
  30. Junos OS Evolved versions 25.2R1-x antérieures à 25.2R1-S1-EVO
  31. cRPD versions antérieures à 26.2R1
CVE identifiers · 23