CVE-2026-103392

CVE-2026-103392CVE-2026-103392

Description

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length.

Scoring

CVSS 4.8 ()
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
Last modified2026-10-28
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.