CVE-2026-78428NVD

Vulnerability Summary

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

Severity Level

HIGH(8.0)

Published Date

Sep 17, 2026

Last Modified

Sep 17, 2026

Exploitation Status

No confirmed exploitation yet

EPSS Score (30-Day)

0.24%Probability

Root Weakness (CWE)

N/A

CVSS v3.1 Base Metrics — Score 8.0 (HIGH)

Attack VectorNetwork

Attack ComplexityHigh

Privileges RequiredNone

User InteractionRequired

ScopeChanged

ConfidentialityHigh

IntegrityHigh

AvailabilityNone

Affected & Patched Versions

Affected Versions

go neuvector >= <5.6.1

Patched Versions

Not provided by cveorg for this CVE.

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.

🚫Ad-Free — Uninterrupted experience.