Login Request a demo
Medium severity · published Oct 28, 2026
CVE-2026-103404
Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials
New
6.8
CVSS
–
EPSS
No
On KEV
Description
An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Session Smart Conductor · Juniper Networks
before 7.0.5; 7.1.0 before 7.1.7; 7.2.0 before 7.2.3 · source: vendor
Affected product
SS
Session Smart Conductor
Juniper Networks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-103404
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-103404
vendor-advisory
https://supportportal.juniper.net/JSA112183
More from Session Smart Conductor
9.8
CVE-2026-103406
Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.
9.8
CVE-2025-21589
Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability
8.8
CVE-2026-106079
Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration
8.8
CVE-2026-103407
Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management
8.8
CVE-2026-103403
Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules