Skip to content
Threat Feed
Subscribe

Product

Session Smart Conductor

2 briefs RSS
critical advisory

Juniper Networks Session Smart Router: Missing authentication for critical function (CVE-2026-103409)

A missing authentication vulnerability in Juniper Networks Session Smart Router allows unauthenticated network-based attackers to escalate privileges via crafted URL parameters on non-onboarded devices.

PoC Session Smart Router +1 vulnerability network-security authentication-bypass privilege-escalation remote-code-execution
2t 6c
critical advisory

Juniper Networks Session Smart Conductor: Improper OS Command Neutralization (CVE-2026-103406)

An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.

PoC Session Smart Conductor
1c