GovernmentFrance Official institution
French cyber agency warns of multiple flaws in Juniper Session Smart products
CERT-FR has issued an advisory warning of several security flaws in Juniper Networks' Session Smart Conductor and Session Smart Router products. Some of these flaws could let an attacker run code on a device remotely, gain higher access rights, or knock the device offline. Juniper's own bulletin, dated 28 October 2026, lists the fixed versions, and users are told to get the patches from there.
What does it mean?
If you run Juniper's Session Smart Conductor or Session Smart Router software, it may be open to attack until you install the update. Juniper's bulletin lists the versions to upgrade to, such as 7.0.5, 7.1.7 or 7.2.3 depending on your release.
Who is affected?
Organizations and network teams running Juniper Session Smart Conductor or Session Smart Router software.