Canada flags Juniper Session Smart flaws fixed in recent releases
Original title: Juniper Networks security advisory (AV26-1101)
Session Smart Conductor and Router builds before 7.0.5, 7.1.7 and 7.2.3 are listed; no CVE ids or exploitation status are given.
The Canadian Centre for Cyber Security published advisory AV26-1101 on October 28, 2026, pointing to Juniper Networks vulnerabilities in Session Smart Conductor and Session Smart Router. Affected builds are those prior to 7.0.5, prior to 7.1.7 and prior to 7.2.3. Juniper describes the issues as multiple internally discovered vulnerabilities that have been resolved. The Cyber Centre tells users and administrators to review Juniper's links and apply necessary updates.
Unconfirmed: The alert does not name the vulnerabilities, their impact, CVE ids, or whether they have been exploited.
- The alert serial number is AV26-1101, dated October 28, 2026.
- Both Session Smart Conductor and Session Smart Router are named.
- Listed lines are prior to 7.0.5, 7.1.7 and 7.2.3.
- Juniper's bulletin is an October 2026 on-demand security bulletin.
- No CVE identifiers appear in the Canadian alert text.
| Product | Affected | Fixed in |
|---|---|---|
| Juniper Networks Session Smart Conductor | prior to 7.0.5, prior to 7.1.7, prior to 7.2.3 | 7.0.5, 7.1.7, 7.2.3 |
| Juniper Networks Session Smart Router | prior to 7.0.5, prior to 7.1.7, prior to 7.2.3 | 7.0.5, 7.1.7, 7.2.3 |
- 1.Review Juniper's on-demand Session Smart bulletin and apply the listed updates.
- Vendors
- Juniper Networks
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1101 Date: October 28, 2026 As of October 28, 2026, Juniper Networks is affected by vulnerabilities in the following products: Session Smart Conductor Prior to 7. 0. 5 Prior to 7.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.