CVE-2026-103392

Published: Oct 28, 2026Modified: Nov 5, 2026

4.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Exploitability: 2.2 / Impact: 2.5

Source: sirt@juniper.net (Secondary)

Description

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length.

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://supportportal.juniper.net/JSA112183

Source: sirt@juniper.net

Timeline

No history available yet.