https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 17:38:06 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1414 certfr-2026-avi-1414 https://db.gcve.eu/vuln/certfr-2026-avi-1414 https://db.gcve.eu/vuln/fkie_cve-2026-103401 <p>An Improper Link Resolution Before File Access (&#39;Link Following&#39;) vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.</p> <p>This vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.</p> <p>An Improper Link Resolution Before File Access (&#39;Link Following&#39;) vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.</p> <p>This vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.</p> https://db.gcve.eu/vuln/fkie_cve-2026-103401 https://db.gcve.eu/vuln/ghsa-mw3r-9657-3g58 <p>An Improper Link Resolution Before File Access (&#39;Link Following&#39;) vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.</p> <p>This vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.</p> <p>An Improper Link Resolution Before File Access (&#39;Link Following&#39;) vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints.</p> <p>This vulnerability can be exploited on Mist-managed routers and on unmanaged Routers that have not yet been onboarded to a Conductor. Routers already managed by Conductor are not affected.</p> https://db.gcve.eu/vuln/ghsa-mw3r-9657-3g58 https://db.gcve.eu/vuln/ncsc-2026-0462 NCSC-2026-0462 https://db.gcve.eu/vuln/ncsc-2026-0462