CVE-2026-78428 Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently
HighCVSS 8.8
EPSS 0.27%
- Published
- Updated
- Exploit status
- No public exploit known
Description
For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE NeuVector | = <5.6.1 | No fix listed |
References
- github.com vendor-advisory
- bugzilla.suse.com issue-tracking