Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-78428

Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

Description

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE neuvector

Default version status: unaffected

  • <5.6.1affected

References