---
id: "CVE-2026-103405"
kind: "vulnerability"
aliases: ["CVE-2026-103405"]
title: "Juniper Session Smart Router: web server lets attackers inject arbitrary HTTP headers"
severity: "medium"
cvss: 5.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "juniper", "network-appliance", "session-smart-conductor", "session-smart-router"]
not_affected_if: ["unknown"]
published_at: "2026-10-28T17:17:25+00:00"
first_seen_at: "2026-10-28T17:34:08+00:00"
updated_at: "2026-10-28T17:34:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103405", "first_seen_at": "2026-10-28T17:34:08+00:00"}]
---

# Juniper Session Smart Router: web server lets attackers inject arbitrary HTTP headers

The web server in Juniper Networks Session Smart Router and Session Smart Conductor does not sanitize certain request body parameters before using them in responses. An attacker can inject arbitrary HTTP headers through those parameters.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-28T17:34:08+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-103405

## From the sources

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_