Product by Juniper Networks
Session Smart Conductor
12 known vulnerabilities in Session Smart Conductor (Juniper Networks), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-106079 | Juniper Networks Session Smart Router: OS Command Injection | 8.8 | |
| High | CVE-2026-103403 | Juniper Networks Session Smart Router: OS Command Injection | 8.8 | |
| Critical | CVE-2025-21589 | Juniper Networks Session Smart Router: Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| Critical | CVE-2026-103406 | Juniper Networks Session Smart Conductor: OS Command Injection | 9.8 | |
| Critical | CVE-2024-2973 | Session Smart Router (SSR): On redundant router deployments API authentication can be bypassed | 10.0 | |
| High | CVE-2026-103401 | Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root | 8.8 | |
| High | CVE-2026-103407 | Juniper Networks Session Smart Router: Path Traversal | 8.8 | |
| High | CVE-2026-103402 | Juniper Networks Session Smart Router: Insufficient Verification of Data Authenticity | 8.8 | |
| Medium | CVE-2026-103390 | Juniper Networks Session Smart Router: Out-of-bounds Read | 5.3 | |
| Medium | CVE-2026-103404 | Juniper Networks Session Smart Conductor: Incorrect Permission Assignment for Critical Resource | 6.8 | |
| Medium | CVE-2026-103405 | Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting | 5.8 | |
| Medium | CVE-2026-103400 | Juniper Networks Session Smart Router: Injection | 5.5 |