Skip to content
OpenAdvisories

Product · SUSE

NeuVector

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.0
    CVE-2026-78426

    Logout bypass via alternate JWT spelling

    The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of NeuVector, can continue using the non-expired token with equivalent spelling of th…

    SUSE NeuVector