CVE-2026-25703
published 2026-08-05CVE-2026-25703: NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive…
PriorityP355high7.3CVSS 3.1
AVNACLPRNUINSUCLILAL
EXPLOIT
EPSS
0.80%
56.2th percentile
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| suse | neuvector | <= 5.4.9 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
NeuVector - Information Disclosure
nuclei·CVSS 7.3
CVE-2026-25703 [HIGH] NeuVector - Information Disclosure
NeuVector - Information Disclosure
NeuVector through 5.4.9 contains an information disclosure vulnerability caused by missing authentication and cached sensitive data in the manager /network/graph API, letting remote attackers access sensitive information, exploit requires no special privileges.
Template:
id: CVE-2026-25703
info:
name: NeuVector - Information Disclosure
author: str4k3r
severity: high
description: |
NeuVector through 5.4.9 contains an information disclosure vulnerability caused by missing authentication and cached sensitive data in the manager /network/graph API, letting remote attackers access sensitive information, exploit requires no special privileges.
impact: |
Remote attackers can access sensitive information from the manager API, potentially exposing confidential
No writeups or analysis indexed.
2026-08-05
Published