Session Smart Conductor vulnerabilities and CVEs

Known vulnerabilities affecting Session Smart Conductor, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

7 vulnerabilities tracked.

9.8 An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session… CVE-2026-103406 28 Oct 2026
8.8 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper… CVE-2026-106079 28 Oct 2026
8.8 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper… CVE-2026-103403 28 Oct 2026
8.8 An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart… CVE-2026-103402 28 Oct 2026
8.8 An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper… CVE-2026-103401 28 Oct 2026
6.8 An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows… CVE-2026-103404 28 Oct 2026
5.8 An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in… CVE-2026-103405 28 Oct 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Session Smart Conductor is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Other products tracked here