{"schema_version":"2","view":"grouped","data":[{"id":3389,"cve_ids":["CVE-2026-78424"],"payload":{"kind":"advisory","title":"OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes","summary":"Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write) permission or anyone with access to NeuVector’s internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the complete compromise of the worker node. This affects NeuVector 5.4 before 5.4.11, NeuVector 5.5 before 5.5.4, NeuVector 5.6 before 5.6.2 and potentially older versions.","evidence":"cve:CVE-2026-78424","products":[{"name":{"value":"NeuVector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-78424","aliases":["CVE-2026-78424"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/neuvector/neuvector/","vendor":"SUSE","product":"NeuVector","versions":[{"status":"affected","version":"0","lessThan":"5.4.11","versionType":"semver"},{"status":"affected","version":"5.5.0","lessThan":"5.5.4","versionType":"semver"},{"status":"affected","version":"5.6.0","lessThan":"5.6.2","versionType":"semver"}],"packageName":"neuvector","defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:17.618Z","provider":"cve","references":["https://github.com/neuvector/neuvector/security/advisories/GHSA-vr77-8vmq-qfmj"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78424","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:17.618Z"}}],"cna":{"orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","shortName":"suse","dateUpdated":"2026-09-28T11:44:05.235Z"}}},"related_cves":[{"value":"CVE-2026-78424","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a764fe00-ff78-419b-b765-6394c0aa5e08","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78424","advisory_id":"a764fe00-ff78-419b-b765-6394c0aa5e08","event_types":["advisory"],"published_at":"2026-10-24T21:34:22.099168+00:00","technologies":["core-cve","neuvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T11:44:05.235+00:00","detail_url":"/advisories/advisory%3Aa764fe00-ff78-419b-b765-6394c0aa5e08","group":{"id":"advisory:a764fe00-ff78-419b-b765-6394c0aa5e08","revision":1,"primary_event_id":3407,"change":"published","superseded_by":[],"changed":{"id":3407,"cve_ids":["CVE-2026-78424"],"payload":{"kind":"advisory","title":"OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes","summary":"Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write) permission or anyone with access to NeuVector’s internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the complete compromise of the worker node. This affects NeuVector 5.4 before 5.4.11, NeuVector 5.5 before 5.5.4, NeuVector 5.6 before 5.6.2 and potentially older versions.","evidence":"cve:CVE-2026-78424","products":[{"name":{"value":"NeuVector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-78424","aliases":["CVE-2026-78424"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/neuvector/neuvector/","vendor":"SUSE","product":"NeuVector","versions":[{"status":"affected","version":"0","lessThan":"5.4.11","versionType":"semver"},{"status":"affected","version":"5.5.0","lessThan":"5.5.4","versionType":"semver"},{"status":"affected","version":"5.6.0","lessThan":"5.6.2","versionType":"semver"}],"packageName":"neuvector","defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:17.618Z","provider":"cve","references":["https://github.com/neuvector/neuvector/security/advisories/GHSA-vr77-8vmq-qfmj"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78424","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:17.618Z"}}],"cna":{"orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","shortName":"suse","dateUpdated":"2026-09-28T11:44:05.235Z"}}},"related_cves":[{"value":"CVE-2026-78424","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a764fe00-ff78-419b-b765-6394c0aa5e08","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78424","advisory_id":"a764fe00-ff78-419b-b765-6394c0aa5e08","event_types":["advisory"],"published_at":"2026-10-24T21:34:22.099168+00:00","technologies":["core-cve","neuvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T11:44:05.235+00:00","detail_url":"/events/3407"},"members":[{"id":3407,"cve_ids":["CVE-2026-78424"],"payload":{"kind":"advisory","title":"OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes","summary":"Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write) permission or anyone with access to NeuVector’s internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the complete compromise of the worker node. This affects NeuVector 5.4 before 5.4.11, NeuVector 5.5 before 5.5.4, NeuVector 5.6 before 5.6.2 and potentially older versions.","evidence":"cve:CVE-2026-78424","products":[{"name":{"value":"NeuVector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-78424","aliases":["CVE-2026-78424"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/neuvector/neuvector/","vendor":"SUSE","product":"NeuVector","versions":[{"status":"affected","version":"0","lessThan":"5.4.11","versionType":"semver"},{"status":"affected","version":"5.5.0","lessThan":"5.5.4","versionType":"semver"},{"status":"affected","version":"5.6.0","lessThan":"5.6.2","versionType":"semver"}],"packageName":"neuvector","defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:17.618Z","provider":"cve","references":["https://github.com/neuvector/neuvector/security/advisories/GHSA-vr77-8vmq-qfmj"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78424","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:17.618Z"}}],"cna":{"orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","shortName":"suse","dateUpdated":"2026-09-28T11:44:05.235Z"}}},"related_cves":[{"value":"CVE-2026-78424","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a764fe00-ff78-419b-b765-6394c0aa5e08","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78424","advisory_id":"a764fe00-ff78-419b-b765-6394c0aa5e08","event_types":["advisory"],"published_at":"2026-10-24T21:34:22.099168+00:00","technologies":["core-cve","neuvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T11:44:05.235+00:00","detail_url":"/events/3407"}]}},{"id":3019,"cve_ids":["CVE-2026-78428"],"payload":{"kind":"advisory","title":"Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently","summary":"For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently","evidence":"cve:CVE-2026-78428","products":[{"name":{"value":"neuvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-78428","aliases":["CVE-2026-78428"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.8,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"SUSE","product":"neuvector","versions":[{"status":"affected","version":"<5.6.1","versionType":"custom"}],"packageName":"neuvector","defaultStatus":"unaffected"}],"modified":"2026-09-28T12:07:55.498Z","provider":"cve","references":["https://github.com/neuvector/neuvector/security/advisories/GHSA-c6rx-pmvf-m3jx","https://bugzilla.suse.com/show_bug.cgi?id=1279937"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78428","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T12:15:03.788838Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-384","description":"CWE-384 Session Fixation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:16:41.723Z"}}],"cna":{"orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","shortName":"suse","dateUpdated":"2026-09-28T12:07:55.498Z"}}},"related_cves":[{"value":"CVE-2026-78428","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c81a6e6d-e8d5-40c9-9f53-75791f02c294","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78428","advisory_id":"c81a6e6d-e8d5-40c9-9f53-75791f02c294","event_types":["advisory"],"published_at":"2026-10-24T21:28:32.454626+00:00","technologies":["core-cve","neuvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T09:19:21.262+00:00","detail_url":"/advisories/advisory%3Ac81a6e6d-e8d5-40c9-9f53-75791f02c294","group":{"id":"advisory:c81a6e6d-e8d5-40c9-9f53-75791f02c294","revision":1,"primary_event_id":3023,"change":"published","superseded_by":[],"changed":{"id":3023,"cve_ids":["CVE-2026-78428"],"payload":{"kind":"advisory","title":"Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently","summary":"For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently","evidence":"cve:CVE-2026-78428","products":[{"name":{"value":"neuvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-78428","aliases":["CVE-2026-78428"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.8,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"SUSE","product":"neuvector","versions":[{"status":"affected","version":"<5.6.1","versionType":"custom"}],"packageName":"neuvector","defaultStatus":"unaffected"}],"modified":"2026-09-28T12:07:55.498Z","provider":"cve","references":["https://github.com/neuvector/neuvector/security/advisories/GHSA-c6rx-pmvf-m3jx","https://bugzilla.suse.com/show_bug.cgi?id=1279937"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78428","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T12:15:03.788838Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-384","description":"CWE-384 Session Fixation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:16:41.723Z"}}],"cna":{"orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","shortName":"suse","dateUpdated":"2026-09-28T12:07:55.498Z"}}},"related_cves":[{"value":"CVE-2026-78428","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c81a6e6d-e8d5-40c9-9f53-75791f02c294","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78428","advisory_id":"c81a6e6d-e8d5-40c9-9f53-75791f02c294","event_types":["advisory"],"published_at":"2026-10-24T21:28:32.454626+00:00","technologies":["core-cve","neuvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T09:19:21.262+00:00","detail_url":"/events/3023"},"members":[{"id":3023,"cve_ids":["CVE-2026-78428"],"payload":{"kind":"advisory","title":"Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently","summary":"For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently","evidence":"cve:CVE-2026-78428","products":[{"name":{"value":"neuvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-78428","aliases":["CVE-2026-78428"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":8.8,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"HIGH","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"SUSE","product":"neuvector","versions":[{"status":"affected","version":"<5.6.1","versionType":"custom"}],"packageName":"neuvector","defaultStatus":"unaffected"}],"modified":"2026-09-28T12:07:55.498Z","provider":"cve","references":["https://github.com/neuvector/neuvector/security/advisories/GHSA-c6rx-pmvf-m3jx","https://bugzilla.suse.com/show_bug.cgi?id=1279937"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78428","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T12:15:03.788838Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-384","description":"CWE-384 Session Fixation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:16:41.723Z"}}],"cna":{"orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","shortName":"suse","dateUpdated":"2026-09-28T12:07:55.498Z"}}},"related_cves":[{"value":"CVE-2026-78428","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c81a6e6d-e8d5-40c9-9f53-75791f02c294","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78428","advisory_id":"c81a6e6d-e8d5-40c9-9f53-75791f02c294","event_types":["advisory"],"published_at":"2026-10-24T21:28:32.454626+00:00","technologies":["core-cve","neuvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T09:19:21.262+00:00","detail_url":"/events/3023"}]}},{"id":3015,"cve_ids":["CVE-2026-78426"],"payload":{"kind":"advisory","title":"Logout bypass via alternate JWT spelling","summary":"The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of NeuVector, can continue using the non-expired token with equivalent spelling of the RSA signature field until the token validity expires.","evidence":"cve:CVE-2026-78426","products":[{"name":{"value":"neuvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-78426","aliases":["CVE-2026-78426"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":2,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"LOW","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/neuvector/neuvector/security/","vendor":"SUSE","product":"neuvector","versions":[{"status":"affected","changes":[{"at":"5.6.2","status":"unaffected"},{"at":"5.5.4","status":"unaffected"},{"at":"5.4.11","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"v5.6.1"}],"packageName":"neuvector","defaultStatus":"unaffected"}],"modified":"2026-09-28T12:03:54.563Z","provider":"cve","references":["https://github.com/neuvector/neuvector/security/advisories/GHSA-wcx5-mq6c-c54j","https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-78426"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78426","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T12:40:12.782525Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T12:40:32.383Z"}}],"cna":{"orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","shortName":"suse","dateUpdated":"2026-09-28T12:03:54.563Z"}}},"related_cves":[{"value":"CVE-2026-78426","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2abdfc89-4a2e-483a-8ceb-edc43e0a22b6","priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78426","advisory_id":"2abdfc89-4a2e-483a-8ceb-edc43e0a22b6","event_types":["advisory"],"published_at":"2026-10-24T21:28:30.084365+00:00","technologies":["core-cve","neuvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T09:28:19.683+00:00","detail_url":"/advisories/advisory%3A2abdfc89-4a2e-483a-8ceb-edc43e0a22b6","group":{"id":"advisory:2abdfc89-4a2e-483a-8ceb-edc43e0a22b6","revision":1,"primary_event_id":3019,"change":"published","superseded_by":[],"changed":{"id":3019,"cve_ids":["CVE-2026-78426"],"payload":{"kind":"advisory","title":"Logout bypass via alternate JWT spelling","summary":"The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of NeuVector, can continue using the non-expired token with equivalent spelling of the RSA signature field until the token validity expires.","evidence":"cve:CVE-2026-78426","products":[{"name":{"value":"neuvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-78426","aliases":["CVE-2026-78426"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":2,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"LOW","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/neuvector/neuvector/security/","vendor":"SUSE","product":"neuvector","versions":[{"status":"affected","changes":[{"at":"5.6.2","status":"unaffected"},{"at":"5.5.4","status":"unaffected"},{"at":"5.4.11","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"v5.6.1"}],"packageName":"neuvector","defaultStatus":"unaffected"}],"modified":"2026-09-28T12:03:54.563Z","provider":"cve","references":["https://github.com/neuvector/neuvector/security/advisories/GHSA-wcx5-mq6c-c54j","https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-78426"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78426","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T12:40:12.782525Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T12:40:32.383Z"}}],"cna":{"orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","shortName":"suse","dateUpdated":"2026-09-28T12:03:54.563Z"}}},"related_cves":[{"value":"CVE-2026-78426","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2abdfc89-4a2e-483a-8ceb-edc43e0a22b6","priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78426","advisory_id":"2abdfc89-4a2e-483a-8ceb-edc43e0a22b6","event_types":["advisory"],"published_at":"2026-10-24T21:28:30.084365+00:00","technologies":["core-cve","neuvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T09:28:19.683+00:00","detail_url":"/events/3019"},"members":[{"id":3019,"cve_ids":["CVE-2026-78426"],"payload":{"kind":"advisory","title":"Logout bypass via alternate JWT spelling","summary":"The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of NeuVector, can continue using the non-expired token with equivalent spelling of the RSA signature field until the token validity expires.","evidence":"cve:CVE-2026-78426","products":[{"name":{"value":"neuvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"low","structured":{"id":"CVE-2026-78426","aliases":["CVE-2026-78426"],"metrics":[{"format":"CVSS","cvssV4_0":{"Safety":"NOT_DEFINED","version":"4.0","Recovery":"NOT_DEFINED","baseScore":2,"Automatable":"NOT_DEFINED","attackVector":"NETWORK","baseSeverity":"LOW","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","exploitMaturity":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","userInteraction":"ACTIVE","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/neuvector/neuvector/security/","vendor":"SUSE","product":"neuvector","versions":[{"status":"affected","changes":[{"at":"5.6.2","status":"unaffected"},{"at":"5.5.4","status":"unaffected"},{"at":"5.4.11","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"v5.6.1"}],"packageName":"neuvector","defaultStatus":"unaffected"}],"modified":"2026-09-28T12:03:54.563Z","provider":"cve","references":["https://github.com/neuvector/neuvector/security/advisories/GHSA-wcx5-mq6c-c54j","https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-78426"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78426","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T12:40:12.782525Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T12:40:32.383Z"}}],"cna":{"orgId":"404e59f5-483d-4b8a-8e7a-e67604dd8afb","shortName":"suse","dateUpdated":"2026-09-28T12:03:54.563Z"}}},"related_cves":[{"value":"CVE-2026-78426","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2abdfc89-4a2e-483a-8ceb-edc43e0a22b6","priority":{"reasons":[],"severity":"low","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"low"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78426","advisory_id":"2abdfc89-4a2e-483a-8ceb-edc43e0a22b6","event_types":["advisory"],"published_at":"2026-10-24T21:28:30.084365+00:00","technologies":["core-cve","neuvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T09:28:19.683+00:00","detail_url":"/events/3019"}]}}],"next_after":3389,"next_before":3015}