Skip to content
Sign in
8.8 High

CVE-2026-78428 For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving…

Description

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

Affected products and versions

Product Affected versions Fixed in
neuvector 5.6 earliest → < 5.6.1 5.6.1
neuvector 5.6 earliest → < 5.6.1 5.6.1

Other CVEs of neuvector

The 2 CVEs of neuvector →
CVE-2026-78426 The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field 2.0 Low
Track this CVE