CRITICAL 9.8 NVD

CVE-2026-103406

An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allow

An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.

References

https://supportportal.juniper.net/JSA112183

Published: 2026-10-28 · Source: NVD · Feed updated: 2026-10-28

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-10-28 via NVD.

Risk Timeline

CVE Disclosed2026-10-28 · -1 days ago

Remediation Resources

Analysis & PoC

supportportal.juniper.net/JSA112183

vulnfeed aggregates 14990 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.