CVE-2026-103391mediumCWE-787

CVE-2026-103391: fallo de gravedad media en Juniper Networks Session Smart Router

Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Session Smart Router

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.2%
An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded packet data and potentially cause a data-plane crash via a transit TCP packet with a crafted TCP option length.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Productos afectados
Juniper Networks · Session Smart Router
CVEs relacionadas — Juniper Networks Session Smart Router

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-21589CRITICALSession Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerabilityEPSS 1.5%CVE-2026-106079HIGHSession Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configurationEPSS 1.2%CVE-2026-103403HIGHSession Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rulesEPSS 1.2%CVE-2024-2973CRITICALSession Smart Router(SSR): On redundant router deployments API authentication can be bypassedEPSS 1.1%CVE-2026-103390MEDIUMSession Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identificationEPSS 0.4%CVE-2026-103409CRITICALSession Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessedEPSS 0.3%