What’s Vulnerable › Products

SUSE neuvector vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your SUSE neuvector version is affected

Latest SUSE neuvector vulnerabilities

• CVE-2026-78424 — OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes (CVSS 8.8)
• CVE-2026-78428 — Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently (CVSS 8.8)
• CVE-2026-78426 — Logout bypass via alternate JWT spelling (CVSS 2.0)
• CVE-2025-46808 — Sensitive information is leaked into NeuVector’s manager container logs (CVSS 6.8)
• CVE-2026-25703 — Potential information leakage from manager /network/graph API in NeuVector (CVSS 7.3)
• CVE-2025-66001 — NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM) (CVSS 8.8)
• CVE-2025-54471 — NeuVector is shipping cryptographic material into its binary (CVSS 6.5)
• CVE-2025-54470 — NeuVector telemetry sender is vulnerable to MITM and DoS (CVSS 8.6)
• CVE-2025-54469 — NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow (CVSS 9.9)
• CVE-2025-8077 — NeuVector admin account has insecure default password (CVSS 9.8)
• CVE-2025-54467 — NeuVector process with sensitive arguments lead to leakage (CVSS 5.3)
• CVE-2025-53884 — NeuVector has an insecure password storage vulnerable to rainbow attack (CVSS 5.3)