Juniper Networks Session Smart Router: Missing authentication for critical function (CVE-2026-103409)
A missing authentication vulnerability in Juniper Networks Session Smart Router allows unauthenticated network-based attackers to escalate privileges via crafted URL parameters on non-onboarded devices.
CVE search metadata
CVE search record: CVE-2026-103409. Severity: critical. CVSS: 9.8. KEV: no. Product: Session Smart Router, Session Smart Conductor. Brief: Juniper Networks Session Smart Router: Missing authentication for critical function (CVE-2026-103409). Brief link: https://feed.craftedsignal.io/briefs/2026-10-juniper-ssr-auth-bypass/
CVE search record: CVE-2026-103401. Severity: high. CVSS: 8.8. KEV: no. Product: Session Smart Router, Session Smart Conductor. Brief: Juniper Networks Session Smart Router: Missing authentication for critical function (CVE-2026-103409). Brief link: https://feed.craftedsignal.io/briefs/2026-10-juniper-ssr-auth-bypass/
CVE search record: CVE-2026-103402. Severity: high. CVSS: 8.8. KEV: no. Product: Session Smart Router, Session Smart Conductor. Brief: Juniper Networks Session Smart Router: Missing authentication for critical function (CVE-2026-103409). Brief link: https://feed.craftedsignal.io/briefs/2026-10-juniper-ssr-auth-bypass/
CVE search record: CVE-2026-103403. Severity: high. CVSS: 8.8. KEV: no. Product: Session Smart Router, Session Smart Conductor. Brief: Juniper Networks Session Smart Router: Missing authentication for critical function (CVE-2026-103409). Brief link: https://feed.craftedsignal.io/briefs/2026-10-juniper-ssr-auth-bypass/
CVE search record: CVE-2026-103408. Severity: high. CVSS: 8.8. KEV: no. Product: Session Smart Router, Session Smart Conductor. Brief: Juniper Networks Session Smart Router: Missing authentication for critical function (CVE-2026-103409). Brief link: https://feed.craftedsignal.io/briefs/2026-10-juniper-ssr-auth-bypass/
CVE search record: CVE-2026-103411. Severity: high. CVSS: 7.1. KEV: no. Product: Session Smart Router, Session Smart Conductor. Brief: Juniper Networks Session Smart Router: Missing authentication for critical function (CVE-2026-103409). Brief link: https://feed.craftedsignal.io/briefs/2026-10-juniper-ssr-auth-bypass/
Triage facts
Revision 2- Applicability
- Session Smart Router, Session Smart Conductor
- Evidence
- Unknown
- Severity
- Critical
- Action
- Elevated
- Sources
- 7 public sources
- Freshness
- Revision 2Oct 28, 19:24 UTC
- Vulnerabilities
- 6 CVEs
- Source quality
- A1Likely
Revision history 1 entry · Revision 2
- Revision 2
poc_available
Changed: claim_state, has_poc, lastmod, poc_references, references, updates
Sources: 1
CVE-2026-103409 is a missing authentication for critical function vulnerability affecting Juniper Networks Session Smart Router. An unauthenticated attacker can exploit this via crafted URL parameters sent to a root-level endpoint. This flaw is only exploitable on devices that have not yet been onboarded to Mist or Conductor management systems. Once a device is successfully onboarded, the vulnerability is no longer exploitable.
Impact
An unauthenticated network-based attacker can achieve administrative privileges on affected appliances, potentially leading to full device compromise.
Recommendation
Prioritize the onboarding of all new Session Smart Router appliances to Mist or Conductor immediately upon deployment. This action renders the vulnerability non-exploitable. Monitor network traffic directed at unmanaged or staging routers for unauthorized access attempts to administrative endpoints.
Immediate actions
Onboard all active Session Smart Router appliances to Mist or Conductor to neutralize CVE-2026-103409.
Identify all deployed Juniper Session Smart Router and Conductor instances and confirm patch status.
Threat Hunt
Identify unauthorized access attempts to administrative web endpoints on newly deployed, non-onboarded Session Smart Routers.
Data: Web server access logs from SSR devices
Monitor for unauthorized file modifications or write operations within the model cache directory.
Data: System file integrity audit logs
Mitigations
Restrict write permissions for the model cache directory to the minimum required service accounts.
CVE-2026-103402