CVE-2026-78428 — Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attem…

CVE-2026-78428

Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently PUBLISHED

Description (CNA)

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

Affected (CNA)

Vendor / product	Versions
SUSE / neuvector	affected <5.6.1

CWE

No CWE identifiers supplied.

References

https://github.com/neuvector/neuvector/security/advisories/GHSA-c6rx-pmvf-m3jx
https://bugzilla.suse.com/show_bug.cgi?id=1279937

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.