Live › vulnerability › CVE-2026-103411
Go to dashboardAn integer underflow in the DHCP message decoder of Juniper Session Smart Router lets a device on the local network send a malicious DHCP reply. The attacker can read information from the router and cause a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 17:34 UTC. All times on this page are UTC.
Session Smart Router deployments where the router acts as a DHCP client on an interface, because the flaw is in the DHCP reply decoder. The attacker must be on the same local network segment as that interface and send a malicious DHCP reply. This is not confirmed from Juniper's advisory yet. Routers that do not use DHCP client mode on any interface are likely unaffected, which also needs vendor confirmation.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply.
This page as .md · .json · in your agent: get_signal("CVE-2026-103411")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.