CVE-2026-78428

UNKNOWN

Description

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

Timeline

Published:September 17th, 2026 10:17 AM

Last modified:September 28th, 2026 1:17 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-384

References & Reports

Advisories, patches, and third-party reports

https://bugzilla.suse.com/show_bug.cgi?id=1279937
https://github.com/neuvector/neuvector/security/advisories/GHSA-c6rx-pmvf-m3jx

Source: NIST NVD · Data may lag official sources by up to one minute