Is CVE-2026-106079 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106079?

CVE-2026-106079 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-106079

Description

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration.