CVE-2026-103402

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-103402", "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "state": "PUBLISHED", "assignerShortName": "juniper", "dateReserved": "2026-09-30T14:33:03.168Z", "datePublished": "2026-10-28T16:34:58.448Z", "dateUpdated": "2026-11-06T18:31:22.763Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Session Smart Router", "vendor": "Juniper Networks", "versions": [{"lessThan": "7.0.5", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "7.1.7", "status": "affected", "version": "7.1.0", "versionType": "custom"}, {"lessThan": "7.2.3", "status": "affected", "version": "7.2.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Session Smart Conductor", "vendor": "Juniper Networks", "versions": [{"lessThan": "7.0.5", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "7.1.7", "status": "affected", "version": "7.1.0", "versionType": "custom"}, {"lessThan": "7.2.3", "status": "affected", "version": "7.2.0", "versionType": "custom"}]}], "datePublic": "2026-10-28T16:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks&nbsp;Session Smart Router and Session Smart Conductor&nbsp;allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files."}], "value": "An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks\u00a0Session Smart Router and Session Smart Conductor\u00a0allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files."}], "exploits": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-345", "description": "CWE-345 Insufficient Verification of Data Authenticity", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper", "dateUpdated": "2026-10-28T16:34:58.448Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://supportportal.juniper.net/JSA112183"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:<br><ul><li>7.0.5 \n\nand all subsequent releases;</li><li>7.1.7 \n\nand all subsequent releases;</li><li>7.2.3 and all subsequent releases.</li></ul>\n\n<br>\n\n<br>"}], "value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases."}], "source": {"advisory": "JSA112183", "defect": ["I95-65026"], "discovery": "INTERNAL"}, "title": "Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "There are no known workarounds for this issue."}], "value": "There are no known workarounds for this issue."}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-06T18:24:33.995124Z", "id": "CVE-2026-103402", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T18:31:22.763Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-103402", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-06T18:24:33.995124Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T18:31:16.672Z"}}], "cna": {"title": "Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation", "source": {"defect": ["I95-65026"], "advisory": "JSA112183", "discovery": "INTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Juniper Networks", "product": "Session Smart Router", "versions": [{"status": "affected", "version": "0", "lessThan": "7.0.5", "versionType": "custom"}, {"status": "affected", "version": "7.1.0", "lessThan": "7.1.7", "versionType": "custom"}, {"status": "affected", "version": "7.2.0", "lessThan": "7.2.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Juniper Networks", "product": "Session Smart Conductor", "versions": [{"status": "affected", "version": "0", "lessThan": "7.0.5", "versionType": "custom"}, {"status": "affected", "version": "7.1.0", "lessThan": "7.1.7", "versionType": "custom"}, {"status": "affected", "version": "7.2.0", "lessThan": "7.2.3", "versionType": "custom"}], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.", "supportingMedia": [{"type": "text/html", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability.", "base64": false}]}], "solutions": [{"lang": "en", "value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:\n * 7.0.5 \n\nand all subsequent releases;\n * 7.1.7 \n\nand all subsequent releases;\n * 7.2.3 and all subsequent releases.", "supportingMedia": [{"type": "text/html", "value": "The following software releases of Session Smart Router and Session Smart Conductor have been updated to resolve these specific issues:<br><ul><li>7.0.5 \n\nand all subsequent releases;</li><li>7.1.7 \n\nand all subsequent releases;</li><li>7.2.3 and all subsequent releases.</li></ul>\n\n<br>\n\n<br>", "base64": false}]}], "datePublic": "2026-10-28T16:00:00.000Z", "references": [{"url": "https://supportportal.juniper.net/JSA112183", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "There are no known workarounds for this issue.", "supportingMedia": [{"type": "text/html", "value": "There are no known workarounds for this issue.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks\u00a0Session Smart Router and Session Smart Conductor\u00a0allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files.", "supportingMedia": [{"type": "text/html", "value": "An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks&nbsp;Session Smart Router and Session Smart Conductor&nbsp;allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-345", "description": "CWE-345 Insufficient Verification of Data Authenticity"}]}], "providerMetadata": {"orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper", "dateUpdated": "2026-10-28T16:34:58.448Z"}}}, "cveMetadata": {"cveId": "CVE-2026-103402", "state": "PUBLISHED", "dateUpdated": "2026-11-06T18:31:22.763Z", "dateReserved": "2026-09-30T14:33:03.168Z", "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "datePublished": "2026-10-28T16:34:58.448Z", "assignerShortName": "juniper"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Session Smart Router", "vendor": "Juniper Networks", "versions": [{"lessThan": "7.0.5", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "7.1.7", "status": "affected", "version": "7.1.0", "versionType": "custom"}, {"lessThan": "7.2.3", "status": "affected", "version": "7.2.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Session Smart Conductor", "vendor": "Juniper Networks", "versions": [{"lessThan": "7.0.5", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "7.1.7", "status": "affected", "version": "7.1.0", "versionType": "custom"}, {"lessThan": "7.2.3", "status": "affected", "version": "7.2.0", "versionType": "custom"}]}], "source": "sirt@juniper.net"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks\u00a0Session Smart Router and Session Smart Conductor\u00a0allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files."}], "id": "CVE-2026-103402", "lastModified": "2026-11-06T19:17:05.193", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "sirt@juniper.net", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-103402", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T18:24:33.995124Z", "version": "2.0.3"}}]}, "published": "2026-10-28T17:17:24.433", "references": [{"source": "sirt@juniper.net", "url": "https://supportportal.juniper.net/JSA112183"}], "sourceIdentifier": "sirt@juniper.net", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-345"}], "source": "sirt@juniper.net", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,7.0.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.1.0,7.1.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.2.0,7.2.3)"}}], "enrichment": {"confidence": 87.0, "confidence_source": "matching", "scores": [{"score": 87.0, "source": "matching"}]}, "original": {"product": "Session Smart Conductor", "source": "cna", "vendor": "Juniper Networks"}, "product": "session_smart_conductor", "vendor": "juniper"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,7.0.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.1.0,7.1.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.2.0,7.2.3)"}}], "enrichment": {"confidence": 86.0, "confidence_source": "matching", "scores": [{"score": 86.0, "source": "matching"}]}, "original": {"product": "Session Smart Router", "source": "cna", "vendor": "Juniper Networks"}, "product": "session_smart_router", "vendor": "juniper"}], "created": "2026-10-28T18:00:23.426578+00:00", "updated": "2026-10-28T22:00:16.638726+00:00", "vendors": ["juniper", "juniper$PRODUCT$session_smart_conductor", "juniper$PRODUCT$session_smart_router"]}