Approved changes feed: RSS · Atom
cpe:2.3:a:suse:neuvector:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Neuvector (f070506d-072d-5739-bfe6-5fa5ac6855c2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25703 |
vulnerable | 2026-09-16 04:33:14.021369 |
Potential information leakage from manager /network/graph API in NeuVector
HIGH (7.3)
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information.
Published: 2026-08-05T09:48:19.466Z
Updated: 2026-08-05T13:09:10.065Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46808 |
vulnerable | 2026-09-16 04:26:12.886134 |
Sensitive information is leaked into NeuVector’s manager container logs
MEDIUM (6.8)
An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log
This issue affects neuvector: before 5.4.5.
Published: 2026-09-09T08:25:42.467Z
Updated: 2026-09-10T14:06:23.527Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8077 |
vulnerable | 2026-06-08 07:45:19.375077 |
NeuVector admin account has insecure default password
CRITICAL (9.8)
A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in `admin` account. If this password is not changed immediately after deployment, any workload with network access within the cluster could use the default credentials to obtain an authentication token. This token can then be used to perform any operation via NeuVector APIs.
Published: 2025-09-17T12:33:37.904Z
Updated: 2026-02-26T17:48:28.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66001 |
vulnerable | 2026-06-08 07:39:21.119049 |
NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)
HIGH (8.8)
NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the system to man-in-the-middle (MITM) attacks.
Published: 2026-01-08T10:23:18.934Z
Updated: 2026-01-08T14:56:07.901Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54471 |
vulnerable | 2026-06-08 07:33:12.628819 |
NeuVector is shipping cryptographic material into its binary
MEDIUM (6.5)
NeuVector used a hard-coded cryptographic key embedded in the source
code. At compilation time, the key value was replaced with the secret
key value and used to encrypt sensitive configurations when NeuVector
stores the data.
Published: 2025-10-30T09:45:56.931Z
Updated: 2025-10-30T13:59:54.426Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54470 |
vulnerable | 2026-06-08 07:33:12.628578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54469 |
vulnerable | 2026-06-08 07:33:12.628219 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54467 |
vulnerable | 2026-06-08 07:33:12.626291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53884 |
vulnerable | 2026-06-08 07:31:15.901148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32188 |
vulnerable | 2026-06-08 06:04:45.115789 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22644 |
vulnerable | 2026-06-08 05:54:26.680164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.