GCVE-110-NCSC-2026-462

Advisory PublishedCVSS 7.1/10

Vulnetix · Advisory published October 30, 2026

An out-of-bounds read vulnerability and malformed HTTP URI in Juniper Networks Session Smart Router and Session Smart Conductor can be exploited via crafted HTTP requests to cause denial of service by triggering service crashes during HTTP application identification.

Download JSON Look up in the Resolve Platform

Weaknesses (CWE)

CWE-125Out-of-bounds ReadCWE-787Out-of-bounds WriteCWE-59Improper Link Resolution Before File Access ('Link Following')CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-732Incorrect Permission Assignment for Critical ResourceCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-121Stack-based Buffer OverflowCWE-306Missing Authentication for Critical FunctionCWE-190Integer Overflow or WraparoundCWE-191Integer Underflow (Wrap or Wraparound)

Risk Scores

CVSS 3.1

7.1/10

High · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
Juniper Networks	vers:unknown/*	—	—

Aliases

CVE-2026-103390 CVE-2026-103391 CVE-2026-103392 CVE-2026-103393 CVE-2026-103394 CVE-2026-103400 CVE-2026-103401 CVE-2026-103402 CVE-2026-103403 CVE-2026-103404 CVE-2026-103405 CVE-2026-103406 CVE-2026-103407 CVE-2026-103408 CVE-2026-103409 CVE-2026-103410 CVE-2026-103411 CVE-2026-106079

References

advisory

Browse GCVE Records

1,060 records in the GCVE database · Updated November 5, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Look up in the Resolve Platform Download JSON