7.3
Élevée
CVE-2026-25703 NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing…
Description
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| neuvector 5.4 | premières → 5.4.9 | Pas de correctif indiqué |
Références
- github.com github.com
- bugzilla.suse.com bugzilla.suse.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de neuvector
Les 14 CVE de neuvector →
CVE-2026-78424
Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write)…
8.8
Élevée
CVE-2026-78426
The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field
2.0
Faible
CVE-2026-78428
For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving…
8.8
Élevée
CVE-2025-46808
An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive…
6.8
Moyenne