CVE-2026-103406Critical· 9.8▾ MidnightAn Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially cra…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.5%
An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.
session_smart_conductor < 7.0.5session_smart_conductor >= 7.1.0 < 7.1.7session_smart_conductor >= 7.2.0 < 7.2.3The following software releases of Session Smart Conductor have been updated to resolve these specific issues:
and all subsequent releases;
and all subsequent releases;
No available workarounds exist for this issue.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-103404Medium· 6.8Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials
CVE-2026-103403High· 8.8Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules
CVE-2026-106079High· 8.8Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration
CVE-2026-103394Low· 3.7Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.
CVE-2026-103390Medium· 5.3Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification
CVE-2026-103391Medium· 5.3Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature