High · 8.8 CVE-2026-78428 EUVD-2026-81412

Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

Published Sep 17, 2026 · Updated Sep 28, 2026 · Assigned by suse

Description

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

Affected products

Vendor	Product	Affected	Fixed
SUSE	neuvector	<5.6.1	—

References

https://github.com/neuvector/neuvector/security/advisories/GHSA-c6rx-pmvf-m3jx vendor-advisory
https://bugzilla.suse.com/show_bug.cgi?id=1279937 issue-tracking