Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Juniper Session Smart Conductor lets remote attacker run any command

CVE-2026-103406 · published 12 days ago
Summary

The Session Smart Conductor system can be tricked by an unauthenticated user into running whatever commands they want on the server, giving them full administrator control. This happens during the key‑management process when a specially crafted identifier is sent. Apply the vendor’s security update or patch and restrict network access to the service to stop this risk.

What to do
  • Update juniper networks session smart conductor to version 7.0.5 or later.
Affected software
VendorProductAffected versions
juniper networks session smart conductor < 7.0.5
Original advisory text
Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.
An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published28 Oct 2026
Updated8 Nov 2026
First seen28 Oct 2026
Sources
CVE-2026-103406 · NVD
CVE-2026-103406 · MITRE
Track software like this
Free during beta