Session Smart Router (Juniper Networks) - vulnerabilities (CVEs)
18 CVEs, 16 in the last 30 days, 2 known versions, newest CVE from 2026-10-28. Vendor: Juniper Networks.
CVEs of Session Smart Router
- CVE-2026-106079 - CVSS 8.8 (high), 2026-10-28: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart…
- CVE-2026-103411 - CVSS 7.1 (high), 2026-10-28: An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause…
- CVE-2026-103410 - CVSS 7.5 (high), 2026-10-28: An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a…
- CVE-2026-103409 - CVSS 9.8 (critical), 2026-10-28: A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to…
- CVE-2026-103408 - CVSS 8.8 (high), 2026-10-28: A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to…
- CVE-2026-103407 - CVSS 8.8 (high), 2026-10-28: An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart…
- CVE-2026-103405 - CVSS 5.8 (medium), 2026-10-28: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks…
- CVE-2026-103403 - CVSS 8.8 (high), 2026-10-28: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart…
- CVE-2026-103402 - CVSS 8.8 (high), 2026-10-28: An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an…
- CVE-2026-103401 - CVSS 8.8 (high), 2026-10-28: An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart…
- CVE-2026-103400 - CVSS 5.5 (medium), 2026-10-28: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks…
- CVE-2026-103394 - CVSS 3.7 (low), 2026-10-28: An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial…
- CVE-2026-103393 - CVSS 4.3 (medium), 2026-10-28: An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory…
- CVE-2026-103392 - CVSS 4.8 (medium), 2026-10-28: An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and…
- CVE-2026-103391 - CVSS 5.3 (medium), 2026-10-28: An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded…
- CVE-2026-103390 - CVSS 5.3 (medium), 2026-10-28: An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to…
- CVE-2025-21589 - CVSS 9.8 (critical), 2026-01-27: An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to…
- CVE-2024-2973 - CVSS 10 (critical), 2024-06-27: An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer…
