Product by Juniper Networks
Session Smart Router
20 known vulnerabilities in Session Smart Router (Juniper Networks), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-106079 | Juniper Networks Session Smart Router: OS Command Injection | 8.8 | |
| High | CVE-2026-103403 | Juniper Networks Session Smart Router: OS Command Injection | 8.8 | |
| Critical | CVE-2025-21589 | Juniper Networks Session Smart Router: Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| Critical | CVE-2026-103406 | Juniper Networks Session Smart Conductor: OS Command Injection | 9.8 | |
| Critical | CVE-2024-2973 | Session Smart Router (SSR): On redundant router deployments API authentication can be bypassed | 10.0 | |
| Critical | CVE-2026-103409 | Juniper Networks Session Smart Router: Missing Authentication for Critical Function | 9.8 | |
| High | CVE-2026-103401 | Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root | 8.8 | |
| High | CVE-2026-103408 | Juniper Networks Session Smart Router: Stack-based Buffer Overflow | 8.8 | |
| High | CVE-2026-103407 | Juniper Networks Session Smart Router: Path Traversal | 8.8 | |
| High | CVE-2026-103402 | Juniper Networks Session Smart Router: Insufficient Verification of Data Authenticity | 8.8 | |
| High | CVE-2026-103410 | Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection | 7.5 | |
| Medium | CVE-2026-103390 | Juniper Networks Session Smart Router: Out-of-bounds Read | 5.3 | |
| High | CVE-2026-103411 | Juniper Networks Session Smart Router: Integer Underflow (Wrap or Wraparound) | 7.1 | |
| Medium | CVE-2026-103404 | Juniper Networks Session Smart Conductor: Incorrect Permission Assignment for Critical Resource | 6.8 | |
| Medium | CVE-2026-103405 | Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting | 5.8 | |
| Medium | CVE-2026-103400 | Juniper Networks Session Smart Router: Injection | 5.5 | |
| Medium | CVE-2026-103391 | Juniper Networks Session Smart Router: Out-of-bounds Write | 5.3 | |
| Medium | CVE-2026-103392 | Juniper Networks Session Smart Router: Out-of-bounds Write | 4.8 | |
| Low | CVE-2026-103394 | Juniper Networks Session Smart Router: Improper Initialization | 3.7 | |
| Medium | CVE-2026-103393 | Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing | 4.3 |