This vulnerability (CVE-2026-57032) involves improper handling of undefined parameters (CWE-236) in the packet forwarding engine of Junos OS on EX Series devices. When an attacker with low privileges attempts to subscribe to an unsupported telemetry sensor path on affected devices via gRPC, the FPC crashes, leading to a denial-of-service condition. The issue manifests with log messages indicating missing resource names for the sensor. The affected Junos OS versions are all versions before 23.2R2-S7, 23.4 versions before 23.4R2-S8, 24.2 versions before 24.2R2-S5, and 24.4 versions before 24.4R2.

An authenticated attacker with low privileges can cause a denial-of-service by crashing the forwarding packet card on affected Junos OS EX Series devices. This results in a complete service outage until the affected module automatically restarts. There is no impact on confidentiality or integrity reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability affects specific Junos OS versions prior to certain patch releases. Until official patches or updates are confirmed, restrict access to the gRPC telemetry interface to trusted users and monitor for attempts to subscribe to unsupported telemetry sensor paths. Follow Juniper Networks' advisories for updates and apply official fixes once available.