Juniper patches critical auth bypass in Session Smart routers

Juniper Networks disclosed and patched a critical authentication-bypass vulnerability (CVE-2025-21589) affecting Session Smart Router, Session Smart Conductor, and WAN Assurance Managed Routers that could allow network-based attackers to bypass authentication and take administrative control; Juniper released fixes in specific SSR releases, noted no evidence of active exploitation so far, and advised administrators to upgrade affected systems (Conductor-managed deployments will auto-apply the fix when Conductors are upgraded).