Loading vulnerability…
DHCP Integer Underflow in Juniper Networks Session Smart Router
CVE-2026-103411 is an integer underflow vulnerability in the DhcpMessageDecoder component of Juniper Networks Session Smart Router. Processing DHCP options in a malicious DHCP reply can cause information disclosure and a service crash. Exploitation requires local network access. Affected releases include 7.0.x before 7.0.5, 7.1.x before 7.1.7, and 7.2.x before 7.2.3.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can disclose information and crash the affected service, resulting in denial of service. The specific information exposed and the extent or duration of service disruption are not established.
Patch, then assume compromise.
Upgrade Juniper Networks Session Smart Router to version 7.0.5, 7.1.7, or 7.2.3, or a later fixed release in the applicable release branch, following Juniper advisory JSA112183.
No validated public exploits yet. Hidden: 1 rejected by Mallory's analysis as not a working exploit.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.