CVE-2026-103392 Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length...

CVE-2026-103392

The Juniper Networks Session Smart Router is vulnerable to an Out-of-Bounds Write in its TCP header processing. An attacker can exploit this by sending a transit TCP packet with an oversized SACK option length , which allows for the corruption of TCP payload data and potential session desynchroni...

EUVD-2026-112224

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length...