<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: juniper-networks-session-smart-conductor</title><description>Every new CVE for juniper-networks-session-smart-conductor.</description><link>https://agentprime.io/</link><item><title>CVE-2026-106079: Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration</title><link>https://agentprime.io/advisories/CVE-2026-106079/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-106079/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:37:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103407: Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management</title><link>https://agentprime.io/advisories/CVE-2026-103407/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103407/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:36:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103406: Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.</title><link>https://agentprime.io/advisories/CVE-2026-103406/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103406/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:35:53 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-103405: Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting</title><link>https://agentprime.io/advisories/CVE-2026-103405/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103405/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:35:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103404: Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials</title><link>https://agentprime.io/advisories/CVE-2026-103404/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103404/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:35:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103403: Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules</title><link>https://agentprime.io/advisories/CVE-2026-103403/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103403/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:35:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103402: Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation</title><link>https://agentprime.io/advisories/CVE-2026-103402/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103402/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:34:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103401: Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root</title><link>https://agentprime.io/advisories/CVE-2026-103401/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103401/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:34:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103400: Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup</title><link>https://agentprime.io/advisories/CVE-2026-103400/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103400/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:34:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103390: Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification</title><link>https://agentprime.io/advisories/CVE-2026-103390/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103390/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 16:33:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-21589: Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-21589/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-21589/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Jan 2026 20:32:13 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-2973: Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed</title><link>https://agentprime.io/advisories/CVE-2024-2973/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2973/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Jun 2024 20:17:50 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>