Live › vulnerability › CVE-2026-103407
Go to dashboardIn Juniper Session Smart Router and Session Smart Conductor, ConfigDirector has a path traversal flaw in its certificate and private-key REST API. An authenticated REST user can read, overwrite, or delete arbitrary certificate and key files on the host filesystem.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Teams running Juniper Session Smart Router or Session Smart Conductor where ConfigDirector's certificate and private-key REST API is reachable by an authenticated REST user. Such a user can read, overwrite or delete certificate and key files on the host, so look at who holds REST credentials. The affected versions and whether the REST API is on by default are not yet confirmed from Juniper's own text. Installations with no REST users can lower priority.
No product ranges from the sources yet.
7.0.5, 7.1.7, 7.2.3; confirm against the Juniper advisory before upgradingEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the certificate and private-key REST API.
This page as .md · .json · in your agent: get_signal("CVE-2026-103407")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.