CVE-2026-103392: Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled
Published Oct 28, 2026
·Updated
An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length.
Affected Software
1 affected component
Juniper Networks Session Smart Router
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Juniper Networks Session Smart Routerto a version that resolves this vulnerability.Fixed in 7.0.5 - Upgrade
Upgrade
Juniper Networks Session Smart Routerto a version that resolves this vulnerability.Fixed in 7.1.7 - Upgrade
Upgrade
Juniper Networks Session Smart Routerto a version that resolves this vulnerability.Fixed in 7.2.3
Event History
Oct 28, 2026
CVE Published
via MITRE·04:33 PM
Data Sourced
via MITRE·04:33 PM
RemedyDescriptionSeverityWeakness