Is CVE-2026-103406 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-103406?

CVE-2026-103406 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-103406

Description

An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.