CVE-2026-103393: Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing
Published Oct 28, 2026
·Updated
An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory contents or cause a system fault via a specially crafted VRRPv3 advertisement.
Affected Software
1 affected component
Juniper Networks Session Smart Router
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Juniper Networks Session Smart Routerto a version that resolves this vulnerability.Fixed in 7.0.5 - Upgrade
Upgrade
Juniper Networks Session Smart Routerto a version that resolves this vulnerability.Fixed in 7.1.7 - Upgrade
Upgrade
Juniper Networks Session Smart Routerto a version that resolves this vulnerability.Fixed in 7.2.3
Event History
Oct 28, 2026
CVE Published
via MITRE·04:34 PM
Data Sourced
via MITRE·04:34 PM
RemedyDescriptionSeverityWeakness