Live › vulnerability › CVE-2026-103391
Go to dashboardA flaw in the TCP proxy and optimization path of Juniper's Session Smart Router lets a crafted transit TCP packet with a bad option length write past a buffer. An attacker can corrupt forwarded packet data and may crash the data plane.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Sources do not name the affected Session Smart Router versions or whether the SSR TCP proxy/optimization feature must be enabled. Teams running Juniper Session Smart Routers should check the vendor advisory for affected releases and whether TCP proxy or optimization is in use. Teams without Juniper SSR gear can skip it.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded packet data and potentially cause a data-plane crash via a transit TCP packet with a crafted TCP option length.
This page as .md · .json · in your agent: get_signal("CVE-2026-103391")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.