Live › vulnerability › CVE-2026-103392
Go to dashboardA flaw in how Juniper Session Smart Router processes TCP headers lets an out-of-bounds write happen when a transit packet carries an oversized SACK option length. An attacker can corrupt TCP payload data and possibly desynchronize sessions passing through the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Organizations running Juniper Session Smart Router appliances that carry TCP traffic in transit. The sources do not name affected or fixed versions. Teams that do not run this appliance can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length.
This page as .md · .json · in your agent: get_signal("CVE-2026-103392")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.