🔐 CVE Alert

CVE-2026-25703

HIGH 7.3

Potential information leakage from manager /network/graph API in NeuVector

CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th

NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information.

CWE CWE-306 CWE-524 CWE-202
Vendor suse
Product neuvector
Published Aug 5, 2026
Stay Ahead of the Next One

Get instant alerts for suse neuvector

Be the first to know when new high vulnerabilities affecting suse neuvector are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Affected Versions

SUSE / NeuVector
0 ≤ 5.4.9

References

NVD ↗ CVE.org ↗ EPSS Data ↗
github.com: https://github.com/neuvector/manager/security/advisories/GHSA-hx45-873x-74qv bugzilla.suse.com: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-25703