CVE-2026-78427

4.3 MEDIUMpublic exploit available

Published 2026-09-17 · Updated 2026-09-18

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the image path is entirely controlled by the workload author, any user capable of deploying workloads can evade admission deny rules simply by naming their image path after one of these sidecar images.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weaknesses

CWE-807

Public exploit & PoC references

https://github.com/neuvector/neuvector/security/advisories/GHSA-78r4-3wfq-r2xm

All references

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-78427
https://github.com/neuvector/neuvector/security/advisories/GHSA-78r4-3wfq-r2xm

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

LOWCVE-2026-101079PoC
LOWCVE-2026-101131
HIGHCVE-2026-56681PoC
MEDIUMCVE-2026-56682PoC
HIGHCVE-2026-81179PoC
CRITICALCVE-2026-84474
CRITICALCVE-2026-85751PoC
CRITICALCVE-2026-86863PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.