CVE-2026-103394
CVE-2026-103394 · Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via security policy assignment.
CVSS 3.7 · Low · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
session smart router
- Versions
- ≥ 0, < 7.0.5: Affected (custom)
- ≥ 7.1.0, < 7.1.7: Affected (custom)
- ≥ 7.2.0, < 7.2.3: Affected (custom)
Update to 7.0.5; Update to 7.1.7; Update to 7.2.3