7.3
High
CVE-2026-25703 NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing…
Description
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| neuvector 5.4 | earliest → 5.4.9 | No fix stated |
References
- github.com github.com
- bugzilla.suse.com bugzilla.suse.com
Timeline
- Published
- Last modified
Other CVEs of neuvector
The 14 CVEs of neuvector →
CVE-2026-78424
Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write)…
8.8
High
CVE-2026-78426
The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field
2.0
Low
CVE-2026-78428
For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving…
8.8
High
CVE-2025-46808
An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive…
6.8
Medium