CVE-2026-106079

HIGH Status: Awaiting Analysis

CVSS Scores

CVSS v3.x Base Score
8.8
HIGH

Description

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration.

Published
October 28, 2026 5:17 PM
Last Modified
October 28, 2026 5:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-78

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry