Is CVE-2026-103407 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-103407?

CVE-2026-103407 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-103407

Description

An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the certificate and private-key REST API.