Log in Start free

Vulnerability · Published Oct 28, 2026 · Assigned by juniper

CVE-2026-103401Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root

High 8.8

In plain English

A high-severity security flaw in Session Smart Conductor from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.3%top 71.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints. This vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.

Affected products (as reported)

VendorProductVersions
Juniper Networks Session Smart Router 0 – before 7.0.57.1.0 – before 7.1.77.2.0 – before 7.2.3
Juniper Networks Session Smart Conductor 0 – before 7.0.57.1.0 – before 7.1.77.2.0 – before 7.2.3

Weakness: CWE-59 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References