Skip to contentJuniper Networks Session Smart Conductor vulnerabilities
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configurationCVE-2026-1060798.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI managementCVE-2026-1034078.8 High
- juniper networks session smart conductorSession Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.CVE-2026-1034069.8 Critical
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splittingCVE-2026-1034055.8 Medium
- juniper networks session smart conductorSession Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentialsCVE-2026-1034046.8 Medium
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rulesCVE-2026-1034038.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalationCVE-2026-1034028.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as rootCVE-2026-1034018.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanupCVE-2026-1034005.5 Medium
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identificationCVE-2026-1033905.3 Medium
- juniper networks session smart conductor, session smart router, wan assurance managed router +2 moreSession Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerabilityCVE-2025-215899.3 Critical
- juniper session smart conductor, session smart router, wan assurance router +2 moreSession Smart Router(SSR): On redundant router deployments API authentication can be bypassedCVE-2024-297310.0 Critical