Medium severity5.8NVD Advisory· Published Oct 28, 2026· Updated Oct 28, 2026
CVE-2026-103405
CVE-2026-103405
Description
An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.