CVE-2026-103410: Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection

Published Oct 28, 2026

Updated

An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate.

Affected Software

1 affected component

Juniper Networks Session Smart Router

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Juniper Networks Session Smart Router to a version that resolves this vulnerability.
Fixed in 7.0.5
Upgrade
Upgrade Juniper Networks Session Smart Router to a version that resolves this vulnerability.
Fixed in 7.1.7
Upgrade
Upgrade Juniper Networks Session Smart Router to a version that resolves this vulnerability.
Fixed in 7.2.3

Event History

Oct 28, 2026

CVE Published

via MITRE·04:37 PM

Data Sourced

via MITRE·04:37 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated remote attacker can exploit it by supplying a specially crafted TLS server certificate to the affected DPI certificate scanner.

What is the impact of successful exploitation?

Successful exploitation can cause a denial of service. The provided information does not indicate confidentiality or integrity impact.

Is user interaction or prior access required?

No. The supplied vector indicates network reachability, low attack complexity, no privileges required, and no user interaction.