Loading vulnerability…
Integer Overflow in Juniper Session Smart Router DPI Certificate Scanner
CVE-2026-103410 is an integer overflow vulnerability in the deep packet inspection (DPI) certificate scanner of Juniper Networks Session Smart Router. Processing a specially crafted TLS server certificate allows an unauthenticated remote attacker to cause denial of service. Affected releases include 7.0.x before 7.0.5, 7.1.x before 7.1.7, and 7.2.x before 7.2.3.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation causes denial of service, affecting the availability of the vulnerable Session Smart Router. The precise scope and duration of disruption are not specified. Code execution, privilege escalation, and confidentiality or integrity impacts are not established for this vulnerability.
Patch, then assume compromise.
Upgrade Session Smart Router to version 7.0.5, 7.1.7, or 7.2.3 or a later fixed release in the applicable branch, following Juniper security advisory JSA112183.
No public exploits tracked yet. Mallory keeps watching.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.