An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.
This vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.
References
| Link | Resource |
|---|---|
| https://supportportal.juniper.net/JSA112183 |
Configurations
No configuration.
History
28 Oct 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-28 17:17
Updated : 2026-10-28 17:17
NVD link : CVE-2026-103401
Mitre link : CVE-2026-103401
CVE.ORG link : CVE-2026-103401
JSON object : View
Products Affected
No product.
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')