neuvector — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in neuvector, with AI-generated Chinese analysis, references, and POCs.

Vendor: SUSE

CVE ID	Title	CVSS	Severity	Published
CVE-2026-78424	OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes CWE-78	8.8	High	2026-09-28
CVE-2026-78426	Logout bypass via alternate JWT spelling CWE-863	2.0	Low	2026-09-17
CVE-2026-78428	Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently	8.8	High	2026-09-17
CVE-2025-46808	Sensitive information is leaked into NeuVector’s manager container logs CWE-532	6.8	Medium	2026-09-09
CVE-2026-25703	Potential information leakage from manager /network/graph API in NeuVector CWE-306	7.3	High	2026-08-05
CVE-2025-66001	NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM) CWE-295	8.8	High	2026-01-08
CVE-2025-54471	NeuVector is shipping cryptographic material into its binary CWE-321	6.5	Medium	2025-10-30
CVE-2025-54469	NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow CWE-78	9.9	Critical	2025-10-30
CVE-2025-54470	NeuVector telemetry sender is vulnerable to MITM and DoS CWE-295	8.6	High	2025-10-30
CVE-2025-8077	NeuVector admin account has insecure default password CWE-1393	9.8	Critical	2025-09-17
CVE-2025-54467	NeuVector process with sensitive arguments lead to leakage CWE-522	5.3	Medium	2025-09-17
CVE-2025-53884	NeuVector has an insecure password storage vulnerable to rainbow attack CWE-759	5.3	Medium	2025-09-17
CVE-2023-32188	JWT token compromise can allow malicious actions including Remote Code Execution (RCE) CWE-1270	9.8^AI	Critical ^AI	2024-10-16
CVE-2023-22644	JWT token compromise can allow malicious actions including Remote Code Execution (RCE) CWE-1270	7.5	-	2023-09-20

All 14 known CVE vulnerabilities affecting neuvector with full Chinese analysis, references, and POCs where available.