NVD CRITICAL: CVE-2026-103406 — An Improper Neutralization of Special Elements used in an OS Command vulnerabili...

Wednesday, October 28, 2026 at 05:17 PM UTC·Source: NIST NVD

Updated: Wednesday, October 28, 2026 at 06:00 PM UTC

Executive Summary

An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-103406

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Oct 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

DHS Strikes Back, Targeting 'Icepick' Leaks

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/trump-administration-strikes-back-targeting-icepick-leaks-image_small-5-a-33249.jpg" align=right hspace=4>Icepi.cx Is Down But Icepicx.is Is Live

35m agoBank Info Security

MEDIUMVulnerabilityNEW

CISO Problems That Can't Be Solved With Technology

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ciso-problems-that-cant-be-solved-technology-image_small-4-a-33248.jpg" align=right hspace=4>Operational Struggles and Arrogant Vendors Mean Tool Churn Is Likely to Continue No matter how advanced or powerful cybersecurity tools become, they will never be able to fix many of the key problems that confront cyber defenders

35m agoBank Info Security

CRITICALVulnerability

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29) appeared first on Unit 42 .

CVE-2026-109618CVE-2026-109619

1h agoUnit 42 (Palo Alto)