An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration.
References
| Link | Resource |
|---|---|
| https://supportportal.juniper.net/JSA112183 |
Configurations
No configuration.
History
28 Oct 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-28 17:17
Updated : 2026-10-28 17:17
NVD link : CVE-2026-106079
Mitre link : CVE-2026-106079
CVE.ORG link : CVE-2026-106079
JSON object : View
Products Affected
No product.
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')