{"id":"CVE-2026-103390","kind":"vulnerability","aliases":["CVE-2026-103390"],"related":[],"title":"Juniper Session Smart Router: HTTP parser flaw lets a crafted request crash it","description":"An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.","summary":"The HttpParser component in Juniper Session Smart Router and Session Smart Conductor reads memory outside its bounds when handling a specially crafted HTTP request. An attacker can use this to cause a denial of service.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","juniper","network-appliance","session-smart-conductor","session-smart-router"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-28T17:17:21+00:00","first_seen_at":"2026-10-28T17:34:08+00:00","triaged_at":"2026-10-28T17:34:40+00:00","updated_at":"2026-10-28T17:34:40+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T17:34:40Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Juniper Session Smart Router: HTTP parser flaw lets a crafted request crash it","impact":"low","summary":"The HttpParser component in Juniper Session Smart Router and Session Smart Conductor reads memory outside its bounds when handling a specially crafted HTTP request. An attacker can use this to cause a denial of service.","category":"infrastructure","nicknames":[],"who_cares":["juniper","session-smart-router","session-smart-conductor","network-appliance"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Device denial of service via crafted HTTP request","analyst_note":"Find affected and fixed versions and the exposed HTTP interfaces in Juniper's advisory for CVE-2026-103390; the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-103390 does not list them.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Operators running Juniper Session Smart Router or Session Smart Conductor whose management or data path accepts HTTP requests. The sources do not list affected versions or which configurations expose the parser.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.00056,"input_tokens":3301,"output_tokens":460,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-103390':15A,18A '-2026':14A,17A 'allow':88C 'applianc':23B 'attack':57B,90C 'bound':48B,71C 'caus':62B,92C 'compon':34B,77C 'conductor':27B,43B,87C 'craft':10A,53B,100C 'crash':12A 'cve':13A,16A 'denial':64B,94C 'flaw':7A 'handl':50B 'http':5A,54B,101C 'httpparser':33B,76C 'infrastructur':19B 'junip':1A,20B,36B,79C 'let':8A 'memori':45B 'network':22B,80C 'network-appli':21B 'out-of-bound':68C 'outsid':46B 'parser':6A 'read':44B,72C 'request':11A,55B,102C 'router':4A,31B,39B,83C 'servic':66B,96C 'session':2A,25B,29B,37B,41B,81C,85C 'session-smart-conductor':24B 'session-smart-rout':28B 'smart':3A,26B,30B,38B,42B,82C,86C 'special':52B,99C 'use':59B 'via':97C 'vulner':73C","nicknames":[],"mitigations":[],"who_affected":"Operators running Juniper Session Smart Router or Session Smart Conductor whose management or data path accepts HTTP requests. The sources do not list affected versions or which configurations expose the parser.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T17:17:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss_by":"sirt@juniper.net","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-103390","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103390","severity":null,"published_at":"2026-10-28T17:17:21+00:00","modified_at":"2026-10-28T17:17:22+00:00","first_seen_at":"2026-10-28T17:34:08+00:00","fetched_at":"2026-10-28T17:34:08+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}