Priority MEDIUM 42
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with co…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01182 · Published 2026-10-28 · Fixed in 7.0.5, 7.1.7 +1 CWE-78
Priority LOW 39
An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00229 · Published 2026-10-28 · Fixed in 7.0.5, 7.1.7 +1 CWE-22
Priority MEDIUM 43
An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root vi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00516 · Published 2026-10-28 · Fixed in 7.0.5, 7.1.7 +1 CWE-78
Priority LOW 25
An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacke…
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00226 · Published 2026-10-28 · Fixed in 7.0.5, 7.1.7 +1 CWE-74
Priority LOW 30
An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes th…
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.00232 · Published 2026-10-28 · Fixed in 7.0.5, 7.1.7 +1 CWE-732
Priority MEDIUM 42
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to perf…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01182 · Published 2026-10-28 · Fixed in 7.0.5, 7.1.7 +1 CWE-78
Priority LOW 39
An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access to the model cache directory to execute ar…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00196 · Published 2026-10-28 · Fixed in 7.0.5, 7.1.7 +1 CWE-345
Priority MEDIUM 40
An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00344 · Published 2026-10-28 · Fixed in 7.0.5, 7.1.7 +1 CWE-59
Priority LOW 24
An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an atta…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00177 · Published 2026-10-28 · Fixed in 7.0.5, 7.1.7 +1 CWE-74
Priority LOW 30
An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00432 · Published 2026-10-28 · Fixed in 7.0.5, 7.1.7 +1 CWE-125