Medium [CVE-2026-103392] Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length
This medium-severity Juniper Networks advisory covers CVE-2026-103392 affecting Session Smart Router.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Get an email when Juniper Networks Session Smart / SD-WAN publishes the next one.
See Juniper Networks Session Smart / SD-WAN's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Summary
An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length.
- Session Smart Router before 7.0.5
- Session Smart Router 7.1.0 before 7.1.7
- Session Smart Router 7.2.0 before 7.2.3
Official advisory · high-confidence parse· fetched 5 days ago·verify at source
- 7.0.5
- 7.1.7
- 7.2.3
Official advisory · high-confidence parse· fetched 5 days ago·verify at source
Mitigation
Upgrade to a fixed release: 7.0.5, 7.1.7, 7.2.3. That is the remediation for this advisory.
The vendor advisory may list interim mitigations or workarounds not captured here. Review it before change work.
Official advisory · high-confidence parse· fetched 5 days ago·verify at source
More Juniper Networks advisories
- CVE-2026-106079Oct 28, 2026Session Smart Router command injection
- CVE-2026-103411Oct 28, 2026Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart
- CVE-2026-103410Oct 28, 2026Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session
- CVE-2026-103409Oct 28, 2026Session Smart Router authentication bypass
- CVE-2026-103408Oct 28, 2026Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart
- CVE-2026-103407Oct 28, 2026Session Smart Router path traversal
Android app · Google Play
Monitor future Juniper Networks CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.