Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to obtain administrative privileges by passing crafted URL parameters to an insecure endpoint running as root. Note that this vulnerability can only be exploited prior to the device being onboarded to Mist/Conductor. The issue can no longer be exploited once a device is onboarded to Mist/Conductor.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
Juniper security bulletin fixes 18 Session Smart Router vulnerabilities, including CVSS 9.8 flaws CVE-2026-103406 and CVE-2026-103409. Update now. #Juniper #SessionSmartRouter #SDWAN #CVE2026103406 #CVE2026103409 #NetworkSecurity #PatchNow #Vulnerability https://securityonline.info/juniper-session-smart-router-vulnerabilities/
출처 - Jenkins — 2026년 10월 28일 보안 권고 https://www.jenkins.io/security/advisory/2026-10-28/ - Juniper — Session Smart Router·Conductor 보안 권고 JSA112183 https://supportportal.juniper.net/s/article/2026-10-On-Demand-Security-Bulletin-Session-Smart-Router-and-Session-Smart-Conductor-Multiple-internally-discovered-vulnerabilities-resolved - Sophos — CVE-2026-118633 https://www.sophos.com/en-us/security-advisories/sophos-sa-20261028-utm-rce - WordPress — 7.1.4 보안 릴리스 https://wordpress.org/news/2026/10/wordpress-7-1-4/ 실제 악용 취약점 및 종합 자료 - CISA — Known Exploited Vulnerabilities Catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog - http://pwn.watch — 보안 취약점·사고 모니터링 https://pwn.watch/ - http://pwn.watch — Jenkins 보안 권고 요약 https://pwn.watch/i/jenkins-core-security-advisory-2026-10-28 - http://pwn.watch — Juniper 취약점 요약 https://pwn.watch/i/juniper-session-smart-router-cve-2026-103409 - http://pwn.watch — Sophos UTM 취약점 요약 https://pwn.watch/i/sophos-utm-email-proxy-preauth-rce-cve-2026-118633