Threats tagged 'ghsa-4q6m-6p89-9rmf'

CVE-2026-103406 is a critical vulnerability in the AutomatedProvisioner component of Juniper Networks Session Smart Conductor. It involves improper neutralization of special elements in OS commands, allowing a remote attacker to execute arbitrary commands as root by sending a specially crafted salt minion ID. This vulnerability has a CVSS score of 9.8, indicating a high severity with full confidentiality, integrity, and availability impact. No affected versions or patch information are provided.