Skip to contentJuniper Networks Session Smart Router vulnerabilities
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configurationCVE-2026-1060798.8 High
- juniper networks session smart routerSession Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsingCVE-2026-1034117.1 High
- juniper networks session smart routerSession Smart Router: Integer overflow causes denial of service during TLS certificate inspectionCVE-2026-1034107.5 High
- juniper networks session smart routerSession Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessedCVE-2026-1034099.8 Critical
- juniper networks session smart routerSession Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP optionsCVE-2026-1034088.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI managementCVE-2026-1034078.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splittingCVE-2026-1034055.8 Medium
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rulesCVE-2026-1034038.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalationCVE-2026-1034028.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as rootCVE-2026-1034018.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanupCVE-2026-1034005.5 Medium
- juniper networks session smart routerSession Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.CVE-2026-1033943.7 Low
- juniper networks session smart routerSession Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processingCVE-2026-1033934.3 Medium
- juniper networks session smart routerSession Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabledCVE-2026-1033924.8 Medium
- juniper networks session smart routerSession Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy featureCVE-2026-1033915.3 Medium
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identificationCVE-2026-1033905.3 Medium
- juniper networks session smart conductor, session smart router, wan assurance managed router +2 moreSession Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerabilityCVE-2025-215899.3 Critical
- juniper session smart conductor, session smart router, wan assurance router +2 moreSession Smart Router(SSR): On redundant router deployments API authentication can be bypassedCVE-2024-297310.0 Critical
- juniper networks 128 technology session smart router, juniper 128 technology session smart router firmware +1 moreSession Smart Router: Authentication Bypass VulnerabilityCVE-2021-313499.8 Critical