Loading vulnerability…
Path Traversal in Juniper Session Smart ConfigDirector PKI Management
CVE-2026-103407 is a path traversal vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor. Insufficient pathname restriction in the certificate and private-key REST API allows an authenticated REST user to access certificate and key files outside the intended directory and read, overwrite, or delete them on the host filesystem. Affected releases include versions before 7.0.5, 7.1.x before 7.1.7, and 7.2.x before 7.2.3.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Exploitation compromises the confidentiality, integrity, and availability of certificate and key files. Disclosure can expose private-key material, while overwriting or deleting these files can invalidate cryptographic configurations and disrupt services that depend on them. The vulnerability has a CVSS v3.1 base score of 8.8, with high confidentiality, integrity, and availability impacts.
Patch, then assume compromise.
Upgrade affected Session Smart Router and Session Smart Conductor installations to version 7.0.5, 7.1.7, or 7.2.3, or a later fixed release in the applicable release branch, following Juniper advisory JSA112183.
No public exploits tracked yet. Mallory keeps watching.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.