Advisories · Technology

SUSE NeuVector.

Every CVE that names SUSE NeuVector among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78424 CVE record

CVSS 8.8 High

OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes
- SUSE NeuVector
- Command injection
Not analysed yet 28 Sept 2026
CVE-2026-78426 CVE record

CVSS 2.0 Low

Logout bypass via alternate JWT spelling
- SUSE neuvector
- Broken access control
Not analysed yet 17 Sept 2026
CVE-2026-78428 CVE record

CVSS 8.8 High

Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently
- SUSE neuvector
- Authentication bypass
Not analysed yet 17 Sept 2026
CVE-2025-46808 CVE record

CVSS 6.8 Medium

Sensitive information is leaked into NeuVector’s manager container logs
- SUSE neuvector
- Information disclosure
Not analysed yet 9 Sept 2026
CVE-2026-25703 CVE record

CVSS 7.3 High

Potential information leakage from manager /network/graph API in NeuVector
- SUSE NeuVector
- Authentication bypass
- CWE-202
Not analysed yet 5 Aug 2026