CVE-2026-25703

Summary

The flaw allows unauthorized access to sensitive information via the /network/graph API due to missing authentication, posing a significant security risk.

Exploitability

Exploitation is relatively easy given that no authentication is required, and cached data containing sensitive information can be accessed.

Blast radius

If exploited, this could lead to data breaches affecting multiple users or systems with sensitive network information being exposed.

Prioritized remediation

Implement proper authentication mechanisms for the /network/graph API endpoint in NeuVector versions prior to 5.4.10.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.