CVE-2026-106079：Juniper Session Smart Router/Conductor YANG 配置 許可權提升漏洞
CVE-2026-106079 - Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration
Juniper Networks 的 Session Smart Router 與 Session Smart Conductor 產品存在一個 OS 指令注入漏洞，允許擁有寫入配置許可權的攻擊者以 root 身份執行任意命令。
此漏洞允許擁有寫入配置許可權的攻擊者以 root 身份執行任意命令，提示網路裝置管理者及時修補以避免潛在系統被完全控制，並強調對 YANG 配置層的嚴格驗證是防止特權提升的關鍵，尤乎對於 Juniper Networks 的 Session Smart Router 與 Session Smart Conductor 產品
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration.
Impact
Affected Products
The following products are affected by CVE-2026-106079
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | 8cbe9d5a-a066-4c94-8978-4b15efeae968 | ||||
| CVSS 3.1 | HIGH | MITRE-CVE | ||||
| CVSS 3.1 | HIGH | [email protected] |
Apply vendor patches to fix OS command injection in AccessManager.
- Apply vendor patches for Session Smart Router.
- Apply vendor patches for Session Smart Conductor.
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-106079.
| URL | Resource |
|---|---|
| https://supportportal.juniper.net/JSA112183 |
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-106079 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-106079
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-106079 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-106079 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by [email protected]
十月. 28, 2026
Action Type Old Value New Value Added Description An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration. Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Added CWE CWE-78 Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/106xxx/CVE-2026-106079.json">CVE-2026-106079</a> Added Reference https://supportportal.juniper.net/JSA112183
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.