agentprime: juniper-networks-session-smart-routerEvery new CVE for juniper-networks-session-smart-router.https://agentprime.io/CVE-2026-106079: Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configurationhttps://agentprime.io/advisories/CVE-2026-106079/https://agentprime.io/advisories/CVE-2026-106079/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:37:49 GMTCVECVE-2026-103411: Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsinghttps://agentprime.io/advisories/CVE-2026-103411/https://agentprime.io/advisories/CVE-2026-103411/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:37:35 GMTCVECVE-2026-103410: Session Smart Router: Integer overflow causes denial of service during TLS certificate inspectionhttps://agentprime.io/advisories/CVE-2026-103410/https://agentprime.io/advisories/CVE-2026-103410/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:37:17 GMTCVECVE-2026-103409: Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessedhttps://agentprime.io/advisories/CVE-2026-103409/https://agentprime.io/advisories/CVE-2026-103409/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:36:46 GMTCVEcriticalCVE-2026-103408: Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP optionshttps://agentprime.io/advisories/CVE-2026-103408/https://agentprime.io/advisories/CVE-2026-103408/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:36:33 GMTCVECVE-2026-103407: Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI managementhttps://agentprime.io/advisories/CVE-2026-103407/https://agentprime.io/advisories/CVE-2026-103407/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:36:19 GMTCVECVE-2026-103405: Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splittinghttps://agentprime.io/advisories/CVE-2026-103405/https://agentprime.io/advisories/CVE-2026-103405/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:35:39 GMTCVECVE-2026-103403: Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit ruleshttps://agentprime.io/advisories/CVE-2026-103403/https://agentprime.io/advisories/CVE-2026-103403/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:35:11 GMTCVECVE-2026-103402: Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalationhttps://agentprime.io/advisories/CVE-2026-103402/https://agentprime.io/advisories/CVE-2026-103402/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:34:58 GMTCVECVE-2026-103401: Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as roothttps://agentprime.io/advisories/CVE-2026-103401/https://agentprime.io/advisories/CVE-2026-103401/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:34:44 GMTCVECVE-2026-103400: Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanuphttps://agentprime.io/advisories/CVE-2026-103400/https://agentprime.io/advisories/CVE-2026-103400/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:34:29 GMTCVECVE-2026-103394: Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.https://agentprime.io/advisories/CVE-2026-103394/https://agentprime.io/advisories/CVE-2026-103394/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:34:16 GMTCVECVE-2026-103393: Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processinghttps://agentprime.io/advisories/CVE-2026-103393/https://agentprime.io/advisories/CVE-2026-103393/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:34:00 GMTCVECVE-2026-103392: Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabledhttps://agentprime.io/advisories/CVE-2026-103392/https://agentprime.io/advisories/CVE-2026-103392/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:33:46 GMTCVECVE-2026-103391: Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy featurehttps://agentprime.io/advisories/CVE-2026-103391/https://agentprime.io/advisories/CVE-2026-103391/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:33:32 GMTCVECVE-2026-103390: Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identificationhttps://agentprime.io/advisories/CVE-2026-103390/https://agentprime.io/advisories/CVE-2026-103390/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:33:16 GMTCVECVE-2025-21589: Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerabilityhttps://agentprime.io/advisories/CVE-2025-21589/https://agentprime.io/advisories/CVE-2025-21589/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 20:32:13 GMTCVEcriticalCVE-2024-2973: Session Smart Router(SSR): On redundant router deployments API authentication can be bypassedhttps://agentprime.io/advisories/CVE-2024-2973/https://agentprime.io/advisories/CVE-2024-2973/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Jun 2024 20:17:50 GMTCVEcritical