SUSE NeuVector

• CVE-2026-78424 High 8.8 OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes 0.2%
• CVE-2026-78426 Low 2.0 Logout bypass via alternate JWT spelling 0.2%
• CVE-2026-78428 High 8.8 Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently 0.3%
• CVE-2025-46808 Medium 6.8 Sensitive information is leaked into NeuVector’s manager container logs 0.3%
• CVE-2026-25703 High 7.3 Potential information leakage from manager /network/graph API in NeuVector 0.8%
• CVE-2025-66001 High 8.8 NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM) 0.4%
• CVE-2025-54471 Medium 6.5 NeuVector is shipping cryptographic material into its binary 0.3%
• CVE-2025-54469 Critical 9.9 NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow 0.5%
• CVE-2025-54470 High 8.6 NeuVector telemetry sender is vulnerable to MITM and DoS 0.2%
• CVE-2025-8077 Critical 9.8 NeuVector admin account has insecure default password 0.6%
• CVE-2025-54467 Medium 5.3 NeuVector process with sensitive arguments lead to leakage 0.2%
• CVE-2025-53884 Medium 5.3 NeuVector has an insecure password storage vulnerable to rainbow attack 0.2%
• CVE-2023-32188 Critical 9.4 JWT token compromise can allow malicious actions including Remote Code Execution (RCE) 0.6%
• CVE-2023-22644 Critical 9.4 JWT token compromise can allow malicious actions including Remote Code Execution (RCE) 0.5%