CVE-2026-103402

HighCVSS 8.8/10Last modified Nov 6, 2026

Description

An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-345

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Juniper Networks	Session Smart Router	< 7.0.5; >= 7.1.0, < 7.1.7; >= 7.2.0, < 7.2.3
Juniper Networks	Session Smart Conductor	< 7.0.5; >= 7.1.0, < 7.1.7; >= 7.2.0, < 7.2.3

References

https://supportportal.juniper.net/JSA112183

Timeline

Published: Oct 28, 2026
Last modified: Nov 6, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-1034038.8An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Netw CVE-2026-1034046.8An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows CVE-2026-1034055.8An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Jun CVE-2026-1034069.8An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session S CVE-2026-1034078.8An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and CVE-2026-1034088.8A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the CVE-2026-1034099.8A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-base CVE-2026-1034107.5An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote a CVE-2026-1034117.1An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network acce CVE-2026-1034128.8Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan. A project file name CVE-2026-1034138.8Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kuberne CVE-2026-1034148.4The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with indepen