Live › vulnerability › CVE-2026-103393
Go to dashboardA crafted VRRPv3 advertisement sent from the same Layer 2 network triggers an out-of-bounds read in Juniper's Session Smart Router VRRP code. An attacker can read stale memory contents or make the system fault.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Devices running Juniper Session Smart Router with VRRP enabled on a segment where an attacker can send Layer 2 traffic. Routers without VRRP configured, or on isolated segments with no untrusted hosts, are less exposed. The sources do not name affected versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory contents or cause a system fault via a specially crafted VRRPv3 advertisement.
This page as .md · .json · in your agent: get_signal("CVE-2026-103393")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.