CVE-2026-103404
Medium · 6.8CVSS
6.8
EPSS
0.2%
Published
Oct 28, 2026
CISA due date
—
The record
An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-111499 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission… CWE-732
- CVE-2026-118574 Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File… CWE-732
- CVE-2026-107060 Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to… CWE-732
- CVE-2026-107055 Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387… CWE-732
- CVE-2026-107047 Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers… CWE-732
- CVE-2026-107044 Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows… CWE-732
- CVE-2026-107042 Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows… CWE-732
- CVE-2026-107039 Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard… CWE-732