CVE-2026-103406
Juniper Networks Session Smart Conductor
Published 28 Oct 2026 · updated 28 Oct 2026 · Awaiting Analysis
9.8 Critical · CVSS 3.1, juniper.net
Description
An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.