CVE-2026-78428Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

Beschreibung

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://github.com/neuvector/neuvector/security/advisories/GHSA-c6rx-pmvf-m3jx vendor-advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1279937 issue-tracking