{"schema_version":1,"title":"Juniper Networks Session Smart Router vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 15 vulnerabilities in Juniper Networks Session Smart Router: 0 in the last 7 days and 15 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-106079, was published on 28 October 2026. 15 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0.","url":"https://junglewise.ai/threats/technologies/session-smart-router","json_url":"https://junglewise.ai/threats/technologies/session-smart-router.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/session-smart-router","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":8,"all_time":15,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":15,"last_90_days":15,"last_365_days":15},"latest":[{"cve":"CVE-2026-106079","cvss":8.8,"slug":"cve-2026-106079-an-improper-neutralization-of-special-elements-used-in-an-os","title":"Juniper Session Smart Router OS command injection in AccessManager","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:32.06+00:00","url":"https://junglewise.ai/threats/cve-2026-106079-an-improper-neutralization-of-special-elements-used-in-an-os"},{"cve":"CVE-2026-103411","cvss":7.1,"slug":"cve-2026-103411-an-integer-underflow-vulnerability-in-dhcpmessagedecoder-in","title":"Juniper Networks Session Smart Router integer underflow in DHCP decoder","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:28.397+00:00","url":"https://junglewise.ai/threats/cve-2026-103411-an-integer-underflow-vulnerability-in-dhcpmessagedecoder-in"},{"cve":"CVE-2026-103410","cvss":7.5,"slug":"cve-2026-103410-an-integer-overflow-vulnerability-in-the-dpi-certificate-scanner","title":"Juniper Networks Session Smart Router integer overflow in DPI certificate scanner","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:28.177+00:00","url":"https://junglewise.ai/threats/cve-2026-103410-an-integer-overflow-vulnerability-in-the-dpi-certificate-scanner"},{"cve":"CVE-2026-103409","cvss":9.8,"slug":"cve-2026-103409-a-missing-authentication-for-critical-function-vulnerability-in","title":"Juniper Networks Session Smart Router missing authentication","severity":"critical","exploited":false,"published_at":"2026-10-28T17:17:27.84+00:00","url":"https://junglewise.ai/threats/cve-2026-103409-a-missing-authentication-for-critical-function-vulnerability-in"},{"cve":"CVE-2026-103408","cvss":8.8,"slug":"cve-2026-103408-a-stack-buffer-overflow-vulnerability-in-the-dhcp-client-in","title":"Juniper Networks Session Smart Router stack buffer overflow in DHCP client","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:26.52+00:00","url":"https://junglewise.ai/threats/cve-2026-103408-a-stack-buffer-overflow-vulnerability-in-the-dhcp-client-in"},{"cve":"CVE-2026-103407","cvss":8.8,"slug":"cve-2026-103407-an-improper-limitation-of-a-pathname-to-a-restricted-directory","title":"Juniper Networks Session Smart Router path traversal in ConfigDirector","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:26.24+00:00","url":"https://junglewise.ai/threats/cve-2026-103407-an-improper-limitation-of-a-pathname-to-a-restricted-directory"},{"cve":"CVE-2026-103405","cvss":5.8,"slug":"cve-2026-103405-an-improper-neutralization-of-special-elements-in-output-used-by","title":"Juniper Networks Session Smart Router HTTP header injection in web server","severity":"medium","exploited":false,"published_at":"2026-10-28T17:17:25.32+00:00","url":"https://junglewise.ai/threats/cve-2026-103405-an-improper-neutralization-of-special-elements-in-output-used-by"},{"cve":"CVE-2026-103403","cvss":8.8,"slug":"cve-2026-103403-an-improper-neutralization-of-special-elements-used-in-an-os","title":"Juniper Session Smart Router OS command injection in AccessManager","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:24.997+00:00","url":"https://junglewise.ai/threats/cve-2026-103403-an-improper-neutralization-of-special-elements-used-in-an-os"},{"cve":"CVE-2026-103402","cvss":8.8,"slug":"cve-2026-103402-an-insufficient-verification-of-data-authenticity-vulnerability","title":"Juniper Session Smart Router/Conductor cache injection privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:24.433+00:00","url":"https://junglewise.ai/threats/cve-2026-103402-an-insufficient-verification-of-data-authenticity-vulnerability"},{"cve":"CVE-2026-103401","cvss":8.8,"slug":"cve-2026-103401-an-improper-link-resolution-before-file-access-link-following","title":"Juniper Session Smart Router link following arbitrary file overwrite","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:24.07+00:00","url":"https://junglewise.ai/threats/cve-2026-103401-an-improper-link-resolution-before-file-access-link-following"},{"cve":"CVE-2026-103400","cvss":5.5,"slug":"cve-2026-103400-an-improper-neutralization-of-special-elements-in-output-used-by","title":"Juniper Session Smart Router/Conductor ember service injection","severity":"medium","exploited":false,"published_at":"2026-10-28T17:17:23.533+00:00","url":"https://junglewise.ai/threats/cve-2026-103400-an-improper-neutralization-of-special-elements-in-output-used-by"},{"cve":"CVE-2026-103393","cvss":4.3,"slug":"cve-2026-103393-an-out-of-bounds-read-vulnerability-in-the-vrrp-implementation","title":"Juniper Networks Session Smart Router VRRP out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-28T17:17:22.793+00:00","url":"https://junglewise.ai/threats/cve-2026-103393-an-out-of-bounds-read-vulnerability-in-the-vrrp-implementation"},{"cve":"CVE-2026-103392","cvss":4.8,"slug":"cve-2026-103392-an-out-of-bounds-write-vulnerability-in-the-tcp-header","title":"Juniper Networks Session Smart Router TCP out-of-bounds write","severity":"medium","exploited":false,"published_at":"2026-10-28T17:17:22.543+00:00","url":"https://junglewise.ai/threats/cve-2026-103392-an-out-of-bounds-write-vulnerability-in-the-tcp-header"},{"cve":"CVE-2026-103391","cvss":5.3,"slug":"cve-2026-103391-an-out-of-bounds-write-vulnerability-in-the-ssr-tcp-proxy","title":"Juniper Networks Session Smart Router out-of-bounds write in TCP proxy","severity":"medium","exploited":false,"published_at":"2026-10-28T17:17:22.163+00:00","url":"https://junglewise.ai/threats/cve-2026-103391-an-out-of-bounds-write-vulnerability-in-the-ssr-tcp-proxy"},{"cve":"CVE-2026-103390","cvss":5.3,"slug":"cve-2026-103390-an-out-of-bounds-read-vulnerability-in-the-httpparser-component","title":"Juniper Networks Session Smart Router and Conductor out-of-bounds read in HTTP parser","severity":"medium","exploited":false,"published_at":"2026-10-28T17:17:21.947+00:00","url":"https://junglewise.ai/threats/cve-2026-103390-an-out-of-bounds-read-vulnerability-in-the-httpparser-component"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":1,"exploited":0,"vulnerabilities":15},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Juniper Networks Junos OS Evolved","slug":"junos-os-evolved","vulnerabilities":53,"url":"https://junglewise.ai/threats/technologies/junos-os-evolved"},{"name":"Juniper Networks Junos OS","slug":"juniper-networks-junos-os","vulnerabilities":47,"url":"https://junglewise.ai/threats/technologies/juniper-networks-junos-os"},{"name":"Juniper Networks Session Smart Conductor","slug":"session-smart-conductor","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/session-smart-conductor"}],"technology":{"hub":true,"name":"Juniper Networks Session Smart Router","slug":"session-smart-router","vendor":{"hub":true,"name":"Juniper Networks","slug":"juniper-networks","url":"https://junglewise.ai/threats/vendors/juniper-networks"},"aliases":[],"category":"appliance","description":"Session Smart Router is a software-based router from Juniper Networks for WAN connectivity.","url":"https://junglewise.ai/threats/technologies/session-smart-router"},"most_severe":[{"cve":"CVE-2026-103409","cvss":9.8,"slug":"cve-2026-103409-a-missing-authentication-for-critical-function-vulnerability-in","title":"Juniper Networks Session Smart Router missing authentication","severity":"critical","exploited":false,"published_at":"2026-10-28T17:17:27.84+00:00","url":"https://junglewise.ai/threats/cve-2026-103409-a-missing-authentication-for-critical-function-vulnerability-in"},{"cve":"CVE-2026-106079","cvss":8.8,"slug":"cve-2026-106079-an-improper-neutralization-of-special-elements-used-in-an-os","title":"Juniper Session Smart Router OS command injection in AccessManager","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:32.06+00:00","url":"https://junglewise.ai/threats/cve-2026-106079-an-improper-neutralization-of-special-elements-used-in-an-os"},{"cve":"CVE-2026-103408","cvss":8.8,"slug":"cve-2026-103408-a-stack-buffer-overflow-vulnerability-in-the-dhcp-client-in","title":"Juniper Networks Session Smart Router stack buffer overflow in DHCP client","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:26.52+00:00","url":"https://junglewise.ai/threats/cve-2026-103408-a-stack-buffer-overflow-vulnerability-in-the-dhcp-client-in"},{"cve":"CVE-2026-103407","cvss":8.8,"slug":"cve-2026-103407-an-improper-limitation-of-a-pathname-to-a-restricted-directory","title":"Juniper Networks Session Smart Router path traversal in ConfigDirector","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:26.24+00:00","url":"https://junglewise.ai/threats/cve-2026-103407-an-improper-limitation-of-a-pathname-to-a-restricted-directory"},{"cve":"CVE-2026-103403","cvss":8.8,"slug":"cve-2026-103403-an-improper-neutralization-of-special-elements-used-in-an-os","title":"Juniper Session Smart Router OS command injection in AccessManager","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:24.997+00:00","url":"https://junglewise.ai/threats/cve-2026-103403-an-improper-neutralization-of-special-elements-used-in-an-os"},{"cve":"CVE-2026-103402","cvss":8.8,"slug":"cve-2026-103402-an-insufficient-verification-of-data-authenticity-vulnerability","title":"Juniper Session Smart Router/Conductor cache injection privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:24.433+00:00","url":"https://junglewise.ai/threats/cve-2026-103402-an-insufficient-verification-of-data-authenticity-vulnerability"},{"cve":"CVE-2026-103401","cvss":8.8,"slug":"cve-2026-103401-an-improper-link-resolution-before-file-access-link-following","title":"Juniper Session Smart Router link following arbitrary file overwrite","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:24.07+00:00","url":"https://junglewise.ai/threats/cve-2026-103401-an-improper-link-resolution-before-file-access-link-following"},{"cve":"CVE-2026-103410","cvss":7.5,"slug":"cve-2026-103410-an-integer-overflow-vulnerability-in-the-dpi-certificate-scanner","title":"Juniper Networks Session Smart Router integer overflow in DPI certificate scanner","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:28.177+00:00","url":"https://junglewise.ai/threats/cve-2026-103410-an-integer-overflow-vulnerability-in-the-dpi-certificate-scanner"},{"cve":"CVE-2026-103411","cvss":7.1,"slug":"cve-2026-103411-an-integer-underflow-vulnerability-in-dhcpmessagedecoder-in","title":"Juniper Networks Session Smart Router integer underflow in DHCP decoder","severity":"high","exploited":false,"published_at":"2026-10-28T17:17:28.397+00:00","url":"https://junglewise.ai/threats/cve-2026-103411-an-integer-underflow-vulnerability-in-dhcpmessagedecoder-in"},{"cve":"CVE-2026-103405","cvss":5.8,"slug":"cve-2026-103405-an-improper-neutralization-of-special-elements-in-output-used-by","title":"Juniper Networks Session Smart Router HTTP header injection in web server","severity":"medium","exploited":false,"published_at":"2026-10-28T17:17:25.32+00:00","url":"https://junglewise.ai/threats/cve-2026-103405-an-improper-neutralization-of-special-elements-in-output-used-by"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}