Juniper Networks Session Smart Router vulnerabilities and fixes
Exploited and high-severity Juniper Networks Session Smart Router vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.8CVE-2026-106079Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configurationRCEFix availableJuniper Networks Session Smart Router
1 min read - 7.1CVE-2026-103411Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsingFix availableJuniper Networks Session Smart Router
1 min read - 9.8CVE-2026-103409Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessedFix availableJuniper Networks Session Smart Router
1 min read - 8.8CVE-2026-103407Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI managementFix availableJuniper Networks Session Smart Router
1 min read - 8.8CVE-2026-103408Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP optionsRCEFix availableJuniper Networks Session Smart Router
1 min read - 8.8CVE-2026-103401Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as rootFix availableJuniper Networks Session Smart Router
1 min read - 8.8CVE-2026-103402Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalationFix availableJuniper Networks Session Smart Router
1 min read - 8.8CVE-2026-103403Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rulesRCEFix availableJuniper Networks Session Smart Router
1 min read