neuvector has 3 CVEs on record between 2023 and 2026. The median CVSS is 6.3 (medium), with 1 rated critical. Most affected products: github.com/neuvector/neuvector (2), github.com/neuvector/scanner (1).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- github.com/neuvector/neuvector 2
- github.com/neuvector/scanner 1
3
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
neuvector vulnerabilities
CVEs affecting neuvector, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2025-67860Low· 3.8NeuVector scanner insecurely handles passwords as command arguments
NeuVector scanner insecurely handles passwords as command arguments
▾ Sunlitneuvector · github.com/neuvector/scannerEPSS 0.10%via OSV
CVE-2025-66001High· 8.8NeuVector supports login authentication through OpenID Connect
NeuVector supports login authentication through OpenID Connect. However, the TLS verification (which verifies the remote server's authenticity and integrity) for OpenID Connect is not enforced by default. As a result this may expose the …
▾ Twilightneuvector · github.com/neuvector/neuvectorEPSS 0.36%via NVD
CVE-2023-32188CriticalJWT token compromise can allow malicious actions including Remote Code Execution (RCE)
JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
▾ Midnightneuvector · github.com/neuvector/neuvectorEPSS 0.59%via OSV