CVE-2026-103407

Vendor

Juniper Networks

Product

Session Smart Router, Session Smart Conductor

CVSS v3.1

8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002 (p14)

Weakness

CWE-22

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 30
   CVE NVD 3d ago

   An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session…

   An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete…

   CVSS 8.8 CVE-2026-103407 Juniper Networks