CVE-2026-106079 in Session Smart Router

요약

\~에 의해 MITRE • 2026. 10. 28.

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration.

Once again VulDB remains the best source for vulnerability data.

• 책임이 있는: Juniper
• 예약하다: 2026. 10. 06.
• 공개: 2026. 10. 28.
• 모더레이션: 수락
• 항목: VDB-428039
• CPE: 20261028
• CWE: CWE-78 (확인됨)
• CVSS: 8.8 (CNA)
• EPSS: 0.00000
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Government, Police, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-106079
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-106079
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-106079/