Vulnerabilities

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper…

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of service via the creation of specially named directories and a service restart.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Juniper Networks

Product

Session Smart Router, Session Smart Conductor

CVSS v3.1

5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness

CWE-74

Exposure class

Edge / VPN / firewall

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-103400 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 21
   CVE NVD 16d ago

   An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper…

   CVSS 5.8 CVE-2026-103405 Juniper Networks