Skip to content
OpenAdvisories
High · 8.8 CVE-2026-103407 EUVD-2026-112214GHSA-349q-fx25-2p3q

Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management

Published Oct 28, 2026 · Updated Nov 8, 2026 · Assigned by juniper

Vendor: Juniper Networks Product: Session Smart Conductor Product: Session Smart Router Category: Network devices

Description

An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the certificate and private-key REST API.

Affected products

VendorProductAffectedFixed
Juniper Networks Session Smart Router < 7.0.5, 7.1.0 – < 7.1.7, 7.2.0 – < 7.2.3 7.0.5
Juniper Networks Session Smart Conductor < 7.0.5, 7.1.0 – < 7.1.7, 7.2.0 – < 7.2.3 7.0.5

Advisories 2

References