/Vulnerability Library

NeuVector - Information Disclosure

CVE-2026-25703
Verified

Description

NeuVector through 5.4.9 contains an information disclosure vulnerability caused by missing authentication and cached sensitive data in the manager /network/graph API, letting remote attackers access sensitive information, exploit requires no special privileges.

Severity

High

CVSS Score

7.3

Exploit Probability

1%

Affected Product

neuvector-manager

Published Date

September 19, 2026

Template Author

str4k3r

CVE-2026-25703.yaml
7.3Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVE ID:
cve-2026-25703
CWE ID:
cwe-202

References

https://nvd.nist.gov/vuln/detail/CVE-2026-25703https://github.com/neuvector/manager/security/advisories/GHSA-hx45-873x-74qvhttps://github.com/neuvector/manager/commit/949cc1184fdf671416f788d9d2a039f8558a717dhttps://github.com/neuvector/manager/releases/tag/v5.5.0

Remediation Steps

Update to the latest version beyond 5.4.9.