Juniper Networks Session Smart Router güvenlik açıkları
Juniper Networks
- Toplam açık
- 16
- Kritik
- 1
- Aktif istismar
- 0
- Yaması çıkan
- 16
- Son açık
- 3 sa önce
Önem dağılımı
- Kritik 1
- Yüksek 8
- Orta 6
- Düşük 1
Son açıklar
16 açık
- 8,8Yüksek CVE-2026-106079Yama var Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration
- 7,1Yüksek CVE-2026-103411Yama var Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing
- 7,5Yüksek CVE-2026-103410Yama var Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection
- 9,8Kritik CVE-2026-103409Yama var Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed
- 8,8Yüksek CVE-2026-103408Yama var Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options
- 8,8Yüksek CVE-2026-103407Yama var Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management
- 5,8Orta CVE-2026-103405Yama var Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting
- 8,8Yüksek CVE-2026-103403Yama var Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules
- 8,8Yüksek CVE-2026-103402Yama var Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation
- 8,8Yüksek CVE-2026-103401Yama var Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root
- 5,5Orta CVE-2026-103400Yama var Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup
- 3,7Düşük CVE-2026-103394Yama var Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.
- 4,3Orta CVE-2026-103393Yama var Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing
- 4,8Orta CVE-2026-103392Yama var Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled
- 5,3Orta CVE-2026-103391Yama var Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature
- 5,3Orta CVE-2026-103390Yama var Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification