CVE-2026-33773

CVE-2026-33773 is an Incorrect Initialization of Resource vulnerability affecting Juniper Networks Junos OS on specific EX Series and QFX Series switches (EX4100, EX4400, EX4650, and QFX5120). When identical inet or inet6 filters are applied to both IRB interfaces and physical interfaces as egress filters on these devices, only one filter is enforced, allowing traffic that should be blocked to be transmitted out of the affected interface. The vulnerability impacts Junos OS versions 23.4R2-S6 and 24.2R2-S3, with no other versions affected. The vulnerability carries a CVSS score of 5.8 (Medium severity) with a network-based attack vector requiring no authentication or user interaction. The attack has low complexity and results in a limited integrity impact to downstream networks, with no confidentiality or availability implications. The scope is considered changed, indicating potential impact beyond the vulnerable component itself. This vulnerability is not currently listed on the CISA Known Exploited Vulnerabilities catalog and shows no evidence of active exploitation. The EPSS score of 0.00047 indicates minimal community exploitation activity, ranking lower than approximately 99.86 percent of published CVEs. No public exploit code has been identified, and overall community attention appears limited.