Suse Neuvector vulnerabilities

• suse neuvector OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes CVE-2026-78424 8.8 HighSeptember 28, 2026
• go github.com/neuvector/neuvector Admission Control Bypass via Hardcoded Sidecar Image Exemption CVE-2026-78427 5.3 MediumSeptember 17, 2026
• go github.com/neuvector/neuvector SAML Audience Confusion Allows Cross-SP Authentication CVE-2026-78425 7.6 HighSeptember 17, 2026
• suse neuvector Logout bypass via alternate JWT spelling CVE-2026-78426 2.0 LowSeptember 17, 2026
• suse neuvector Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently CVE-2026-78428 8.8 HighSeptember 17, 2026
• suse neuvector Sensitive information is leaked into NeuVector’s manager container logs CVE-2025-46808 6.8 MediumSeptember 9, 2026
• suse neuvector Potential information leakage from manager /network/graph API in NeuVector CVE-2026-25703 7.3 HighAugust 5, 2026
• suse neuvector NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM) CVE-2025-66001 Fix available 8.8 HighDecember 12, 2025
• suse neuvector NeuVector is shipping cryptographic material into its binary CVE-2025-54471 Fix available 6.5 MediumOctober 21, 2025
• suse neuvector NeuVector telemetry sender is vulnerable to MITM and DoS CVE-2025-54470 Fix available 8.6 HighOctober 21, 2025
• suse neuvector NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow CVE-2025-54469 Fix available 9.9 CriticalOctober 21, 2025
• suse neuvector NeuVector admin account has insecure default password CVE-2025-8077 Fix available 9.8 CriticalAugust 28, 2025
• suse neuvector NeuVector process with sensitive arguments lead to leakage CVE-2025-54467 Fix available 5.3 MediumAugust 28, 2025
• suse neuvector NeuVector has an insecure password storage vulnerable to rainbow attack CVE-2025-53884 Fix available 5.3 MediumAugust 28, 2025
• neuvector JWT token compromise can allow malicious actions including Remote Code Execution (RCE) CVE-2023-32188 Fix available 9.4 CriticalOctober 6, 2023
• suse neuvector, manager server +1 more JWT token compromise can allow malicious actions including Remote Code Execution (RCE) CVE-2023-22644 Fix available 9.4 CriticalJune 21, 2023