CVE-2026-103390: Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification
Published Oct 28, 2026
·Updated
An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.
Affected Software
2 affected components
Juniper Networks Session Smart Router
Juniper Networks Session Smart Conductor
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Juniper Networks Session Smart Router and Session Smart Conductorto a version that resolves this vulnerability.Fixed in 7.0.5 - Upgrade
Upgrade
Juniper Networks Session Smart Router and Session Smart Conductorto a version that resolves this vulnerability.Fixed in 7.1.7 - Upgrade
Upgrade
Juniper Networks Session Smart Router and Session Smart Conductorto a version that resolves this vulnerability.Fixed in 7.2.3
Event History
Oct 28, 2026
CVE Published
via MITRE·04:33 PM
Data Sourced
via MITRE·04:33 PM
RemedyDescriptionSeverityWeakness