Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-103390 EUVD-2026-112227GHSA-3f2f-h3c9-56gv

Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification

Published Oct 28, 2026 · Updated Oct 29, 2026 · Assigned by juniper

Vendor: Juniper Networks Product: Session Smart Conductor Product: Session Smart Router Category: Network devices

Description

An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.

Affected products

VendorProductAffectedFixed
Juniper Networks Session Smart Router < 7.0.5, 7.1.0 – < 7.1.7, 7.2.0 – < 7.2.3 7.0.5
Juniper Networks Session Smart Conductor < 7.0.5, 7.1.0 – < 7.1.7, 7.2.0 – < 7.2.3 7.0.5

Advisories 2

References