CVE-2026-103406

CRITICAL Status: Awaiting Analysis

CVSS Scores

CVSS v3.x Base Score
9.8
CRITICAL

Description

An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.

Published
October 28, 2026 5:17 PM
Last Modified
October 28, 2026 5:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-78

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry