Session Smart Conductor (Juniper Networks) - vulnerabilities (CVEs)
12 CVEs, 10 in the last 30 days, 2 known versions, newest CVE from 2026-10-28. Vendor: Juniper Networks.
CVEs of Session Smart Conductor
- CVE-2026-106079 - CVSS 8.8 (high), 2026-10-28: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart…
- CVE-2026-103407 - CVSS 8.8 (high), 2026-10-28: An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart…
- CVE-2026-103406 - CVSS 9.8 (critical), 2026-10-28: An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor…
- CVE-2026-103405 - CVSS 5.8 (medium), 2026-10-28: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks…
- CVE-2026-103404 - CVSS 6.8 (medium), 2026-10-28: An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to…
- CVE-2026-103403 - CVSS 8.8 (high), 2026-10-28: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart…
- CVE-2026-103402 - CVSS 8.8 (high), 2026-10-28: An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an…
- CVE-2026-103401 - CVSS 8.8 (high), 2026-10-28: An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart…
- CVE-2026-103400 - CVSS 5.5 (medium), 2026-10-28: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks…
- CVE-2026-103390 - CVSS 5.3 (medium), 2026-10-28: An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to…
- CVE-2025-21589 - CVSS 9.8 (critical), 2026-01-27: An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to…
- CVE-2024-2973 - CVSS 10 (critical), 2024-06-27: An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer…
