Suse Github.com/neuvector/neuvector vulnerabilities

2 CVEs affecting Suse Github.com/neuvector/neuvector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-78427, published 2026-09-17.

More from Suse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-78425, published 2026-09-17. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wiki, a ticketing system, an expenses tool, or anything they legitimately hold an account on…
• CVE-2026-78427, published 2026-09-17. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the image path is entirely…