Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-103411 | high | 7.1 | No | An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network acce... | 2026-10-28 |
| CVE-2026-103409 | critical | 9.8 | No | A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-base... | 2026-10-28 |
| CVE-2026-103408 | high | 8.8 | No | A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the... | 2026-10-28 |
| CVE-2026-103407 | high | 8.8 | No | An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and... | 2026-10-28 |
| CVE-2026-103406 | critical | 9.8 | No | An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session S... | 2026-10-28 |
| CVE-2026-103405 | medium | 5.8 | No | An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Jun... | 2026-10-28 |
| CVE-2026-103404 | medium | 6.8 | No | An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows... | 2026-10-28 |
| CVE-2026-103403 | high | 8.8 | No | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Netw... | 2026-10-28 |
| CVE-2026-103402 | high | 8.8 | No | An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor... | 2026-10-28 |
| CVE-2026-103401 | high | 8.8 | No | An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networ... | 2026-10-28 |
| CVE-2026-103393 | medium | 4.3 | No | An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to re... | 2026-10-28 |
| CVE-2026-103392 | medium | 4.8 | No | An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP... | 2026-10-28 |
| CVE-2026-103391 | medium | 5.3 | No | An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to c... | 2026-10-28 |
| CVE-2024-52616 | medium | 5.3 | No | A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially... | 2026-10-28 |
| CVE-2024-52615 | medium | 5.3 | No | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where maliciou... | 2026-10-28 |
| CVE-2023-38473 | medium | 5.5 | No | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. | 2026-10-28 |
| CVE-2023-38472 | medium | 5.5 | No | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. | 2026-10-28 |
| CVE-2023-38471 | medium | 5.5 | No | A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. | 2026-10-28 |
| CVE-2023-38470 | medium | 5.5 | No | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. | 2026-10-28 |
| CVE-2023-38469 | medium | 5.5 | No | A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. | 2026-10-28 |