CVE Feed

    Dashboard / CVE / CVE-2026-78427

    CVE-2026-78427

    The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the image path is entirely controlled by the workload author, any user capable of deploying workloads can evade admission deny rules simply by naming their image path after one of these sidecar images.

    Published:Sep 17, 2026
    Last Modified:Sep 28, 2026
    EPS:Sep 17, 2026
    EPSS Score:0.00373
    CVSS Score:5.3

    Affected Products

    Vendor
    Neuvector
    Product
    Neuvector
    Vendor
    Suse
    Product
    Github.com Neuvector Neuvector

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-78425 (CVSS 7.6) — Authorised users of outside applications behind the same corporate identity provider (IdP), for example, a wik…
    CVE-2025-8077 (CVSS 9.8) — A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the de…
    CVE-2025-54467 (CVSS 5.3) — When a Java command with password parameters is executed and terminated by NeuVector for Process rule violatio…
    CVE-2025-53884 (CVSS 5.3) — NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainb…
    CVE-2023-32188 (CVSS 9.4) — A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, …
    CVE-2019-19747 (CVSS 9.8) — NeuVector 3.1 when configured to allow authentication via Active Directory, does not enforce non-empty passwor…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High