Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: SUSE neuvector 0.0.0-20251020133207-084a437033b4, 5.3.5, 5.4.7 Clear all filters
TI-2025-34266 CVE-2025-54469 · GHSA-c8g6-qrwh-m3vp

NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow

Priority MEDIUM 43

A vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTER_RPC_PORT and CLUSTER_LAN_PORT to generate a command to be executed via popen, without first sanitising their values.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00471 Published 2025-10-30 Fixed in 5.3.5, 5.4.7 +1 CWE-78
TI-2025-34267 CVE-2025-54470 · GHSA-qqj3-g7mx-5p4w

NeuVector telemetry sender is vulnerable to MITM and DoS

Priority MEDIUM 43

This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00198 Published 2025-10-30 Fixed in 5.3.5, 5.4.7 +1 CWE-295