PT-2026-128278

CVE-2026-103402

·

Published

2026-10-28

·

Updated

2026-10-28

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-345: Insufficient Verification of Data Authenticity
Related identifiers
CVE-2026-103402
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com