Skip to content
OpenAdvisories
High · 8.8 CVE-2026-103408 EUVD-2026-112213GHSA-mg6q-7pjx-486r

Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options

Published Oct 28, 2026 · Updated Nov 6, 2026 · Assigned by juniper

Description

A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply.

Affected products

VendorProductAffectedFixed
Juniper Networks Session Smart Router < 7.0.5, 7.1.0 – < 7.1.7, 7.2.0 – < 7.2.3 7.0.5

Advisories 2

References