SUSE neuvector vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20256
4. 20266

Newest CVEs

• CVE-2026-78424

  OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes

  SUSE · NeuVector

  High8.8
• CVE-2026-78426

  Logout bypass via alternate JWT spelling

  SUSE · neuvector

  Low2.0
• CVE-2026-78428

  Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

  SUSE · neuvector

  High8.8
• CVE-2025-46808

  Sensitive information is leaked into NeuVector’s manager container logs

  SUSE · neuvector

  Medium6.8
• CVE-2026-25703

  Potential information leakage from manager /network/graph API in NeuVector

  SUSE · NeuVector

  High7.3
• CVE-2025-66001

  NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)

  SUSE · neuvector

  High8.8
• CVE-2025-54471

  NeuVector is shipping cryptographic material into its binary

  SUSE · neuvector

  Medium6.5
• CVE-2025-54469

  NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow

  SUSE · neuvector

  Critical9.9
• CVE-2025-54470

  NeuVector telemetry sender is vulnerable to MITM and DoS

  SUSE · neuvector

  High8.6
• CVE-2025-8077

  NeuVector admin account has insecure default password

  SUSE · neuvector

  Critical9.8