CVE-2026-33783

OVERVIEW CVE-2026-33783 is a function call argument type vulnerability in Juniper Networks Junos OS Evolved affecting PTX Series routers. When colored Segment Routing Traffic Engineering (SRTE) policy tunnels are provisioned via Path Computation Element Communication Protocol (PCEP) with gRPC traffic monitoring enabled, an incorrect argument type causes the evo-aftmand process to crash if the PCEP Originator ASN field contains a 32-bit ASN value exceeding 65,535. The vulnerability affects multiple software versions ranging from 22.4 through 25.2, with static tunnel configurations remaining unaffected. SEVERITY The vulnerability carries a CVSS v3.1 score of 6.5 (Medium) with a network-based attack vector requiring low-privilege authenticated access and no user interaction. The primary impact is availability, resulting in complete denial of service as the crashed process does not automatically restart and requires manual system reboot for recovery. This constitutes a persistent service disruption that could affect router operations in production networks, though exploitation requires specific network configuration conditions and legitimate system access. EXPLOITATION STATUS CVE-2026-33783 shows no evidence of active exploitation. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, maintains an inactive Hot List status, and demonstrates an extremely low EPSS score of 0.0005, indicating negligible community exploitation activity. No public exploit code is currently available, and the restrictive exploitation requirements—authentication, specific tunnel configurations, and particular ASN values—further limit real-world attack feasibility.