Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-103394 EUVD-2026-112222GHSA-8phg-3v62-rphw

Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.

Published Oct 28, 2026 · Updated Oct 29, 2026 · Assigned by juniper

Vendor: Juniper Networks Product: Session Smart Router Category: Network devices

Description

An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via security policy assignment.

Affected products

VendorProductAffectedFixed
Juniper Networks Session Smart Router < 7.0.5, 7.1.0 – < 7.1.7, 7.2.0 – < 7.2.3 7.0.5

Advisories 2

References