p PatchFirst

CVE-2026-103390

CVE-2026-103390 · Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.

CVSS 5.3 · Medium · EPSS 0.4% · Fix available

Published
Updated

Affected products and versions

  • session smart router

    Versions
    • ≥ 0, < 7.0.5: Affected (custom)
    • ≥ 7.1.0, < 7.1.7: Affected (custom)
    • ≥ 7.2.0, < 7.2.3: Affected (custom)

    Update to 7.0.5; Update to 7.1.7; Update to 7.2.3

  • session smart conductor

    Versions
    • ≥ 0, < 7.0.5: Affected (custom)
    • ≥ 7.1.0, < 7.1.7: Affected (custom)
    • ≥ 7.2.0, < 7.2.3: Affected (custom)

    Update to 7.0.5; Update to 7.1.7; Update to 7.2.3

Original sources

Check your server →