CVE-2026-103405

MEDIUM Status: Awaiting Analysis

CVSS Scores

CVSS v3.x Base Score
5.8
MEDIUM

Description

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters.

Published
October 28, 2026 5:17 PM
Last Modified
October 28, 2026 5:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-74

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry