CVE-2026-103406

An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.

Score

CVSS 3.1 9.8 Critical

Status

Awaiting Analysis - sirt@juniper.net

Published

2026-10-28

Last modified

2026-10-28

Weaknesses

CWE-78

Affected products

• Session Smart Conductor (Juniper Networks)

References

• https://supportportal.juniper.net/JSA112183