← All Advisories

CVE-2026-78428

Last refreshed2026-10-12

Status: UPDATED  |  Advisory ID: CVE-2026-78428

Key Details

CVECVE-2026-78428
CVSS Score / Version
8.8 (High) / CVSS v4.0
Updated2026-09-28
Affected products
suse neuvector
Classified as
CWE-384 (Session Fixation)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
suseneuvector
SubsystemsGeneral OT
SectorsMultiple

What to Know

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

What to Do

Monitor suse's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-78428
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-78428