What’s Vulnerable › Products
Juniper Networks Session Smart Conductor vulnerabilities
12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your Juniper Networks Session Smart Conductor version is affected
Latest Juniper Networks Session Smart Conductor vulnerabilities
- CVE-2026-106079 — Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration (CVSS 8.8)
- CVE-2026-103407 — Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management (CVSS 8.8)
- CVE-2026-103406 — Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. (CVSS 9.8)
- CVE-2026-103405 — Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting (CVSS 5.8)
- CVE-2026-103404 — Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials (CVSS 6.8)
- CVE-2026-103403 — Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules (CVSS 8.8)
- CVE-2026-103402 — Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation (CVSS 8.8)
- CVE-2026-103401 — Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root (CVSS 8.8)
- CVE-2026-103400 — Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup (CVSS 5.5)
- CVE-2026-103390 — Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification (CVSS 5.3)
- CVE-2025-21589 — Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability (CVSS 9.8)
- CVE-2024-2973 — Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed (CVSS 10.0)