Live › vulnerability › CVE-2026-103410
Go to dashboardInteger overflow in the DPI certificate scanner of Juniper Session Smart Router lets a remote unauthenticated attacker crash it with a crafted TLS certificate. Juniper's JSA112528 lists patch releases 7.0.5, 7.1.7 and 7.2.3.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Operators running Juniper Session Smart Router with DPI certificate scanning in its traffic path are the ones exposed. The sources do not list affected firmware versions or say whether scanning is on by default, so check the vendor advisory for the release train in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Session Smart Router | vendor | < 7.0.5; 7.1.x < 7.1.7; 7.2.x < 7.2.3 | 7.0.5, 7.1.7, 7.2.3 |
7.0.5 / 7.1.7 / 7.2.37.0.5, 7.1.7 or 7.2.3 (JSA112528, covers the batch; per-CVE mapping not stated)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate.
This page as .md · .json · in your agent: get_signal("CVE-2026-103410")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.