neuvector has 3 CVEs on record between 2023 and 2026. The median CVSS is 6.3 (medium), with 1 rated critical. Most affected products: github.com/neuvector/neuvector (2), github.com/neuvector/scanner (1).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- github.com/neuvector/neuvector 2
- github.com/neuvector/scanner 1
3
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
neuvector vulnerabilities
CVEs affecting neuvector, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2025-67860Low· 3.8NeuVector scanner insecurely handles passwords as command arguments
NeuVector scanner insecurely handles passwords as command arguments
▾ Sunlitneuvector · github.com/neuvector/scannerEPSS 0.09%via OSV
CVE-2025-66001High· 8.8NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)
NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)
▾ Twilightneuvector · github.com/neuvector/neuvectorEPSS 0.37%via OSV
CVE-2023-32188CriticalJWT token compromise can allow malicious actions including Remote Code Execution (RCE)
JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
▾ Midnightneuvector · github.com/neuvector/neuvectorEPSS 0.48%via OSV