Medium [CVE-2026-103390] Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request
This medium-severity Juniper Networks advisory covers CVE-2026-103390 affecting Session Smart Router, Session Smart Conductor.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Get an email when Juniper Networks Session Smart / SD-WAN publishes the next one.
See Juniper Networks Session Smart / SD-WAN's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Summary
An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.
- Session Smart Router before 7.0.5
- Session Smart Router 7.1.0 before 7.1.7
- Session Smart Router 7.2.0 before 7.2.3
- Session Smart Conductor before 7.0.5
- Session Smart Conductor 7.1.0 before 7.1.7
- Session Smart Conductor 7.2.0 before 7.2.3
Official advisory · high-confidence parse· fetched 5 days ago·verify at source
- 7.0.5
- 7.1.7
- 7.2.3
Official advisory · high-confidence parse· fetched 5 days ago·verify at source
Mitigation
Upgrade to a fixed release: 7.0.5, 7.1.7, 7.2.3. That is the remediation for this advisory.
The vendor advisory may list interim mitigations or workarounds not captured here. Review it before change work.
Official advisory · high-confidence parse· fetched 5 days ago·verify at source
More Juniper Networks advisories
- CVE-2026-106079Oct 28, 2026Session Smart Router command injection
- CVE-2026-103407Oct 28, 2026Session Smart Router path traversal
- CVE-2026-103405Oct 28, 2026Improper Neutralization of Special Elements in Output Used by a Downstream Component
- CVE-2026-103403Oct 28, 2026Session Smart Router command injection
- CVE-2026-103402Oct 28, 2026Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks
- CVE-2026-103401Oct 28, 2026Improper Link Resolution Before File Access ('Link Following') vulnerability
Android app · Google Play
Monitor future Juniper Networks CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.