Juniper Networks has fixed a critical flaw in its Session Smart Router.The vulnerability, tracked as CVE-2025-21589, allows an attacker to bypass authentication and take administrative control of the device.The affected products include Session Smart Router, Session Smart Conductor, and WAN Assurance Managed Routers.Juniper Networks has released patches to address the vulnerability and recommends upgrading to the fixed versions.