IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key

Juniper Networks Session Smart Conductor vulnerabilities (CVE)

CVE records published for Juniper Networks Session Smart Conductor, newest first. Follow to get an email when a new one appears.

11 results
8.8High
CVE-2026-106079

Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration

Juniper Networks Session Smart Router; Juniper Networks Session Smart Conductor

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitr…

1.2%EPSS
8.8High
CVE-2026-103407

Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management

Juniper Networks Session Smart Router; Juniper Networks Session Smart Conductor

An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key f…

8.8High
CVE-2026-103403

Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules

Juniper Networks Session Smart Router; Juniper Networks Session Smart Conductor

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to perform arbitrary file deletion and arbitra…

1.2%EPSS
8.8High
CVE-2026-103402

Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation

Juniper Networks Session Smart Router; Juniper Networks Session Smart Conductor

An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges vi…

5.5Medium
CVE-2026-103400

Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup

Juniper Networks Session Smart Router; Juniper Networks Session Smart Conductor

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbit…

9.8Critical
CVE-2025-21589

Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability

Juniper Networks Session Smart Router; Juniper Networks Session Smart Conductor; Juniper Networks WAN Assurance Managed Router

An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to bypass authentication and take administrative control of the device. This issue affects Session Smart Ro…

1.5%EPSS