Critical Vulnerability Patched in Juniper Session Smart Router

Summary: Juniper Networks has released a critical patch addressing an authentication bypass vulnerability (CVE-2025-21589) for its Session Smart Router products. Cybersecurity agencies in Italy and Belgium have issued alerts regarding this vulnerability, which could allow attackers to gain administrative control of affected devices. Organizations are urged to update their systems promptly, although some devices have already been patched automatically.

Affected: Juniper Networks Session Smart Router products

Keypoints :

• Critical authentication bypass vulnerability identified as CVE-2025-21589.
• Affects various versions of Session Smart Router and related products.
• No known exploitation has occurred, but threat actors historically target these devices.
• Organizations advised to update to patched versions immediately.