Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: neo4j Enterprise Edition 2026.02, 5.26.22 Clear all filters
TI-2026-01214 CVE-2026-1524 · GHSA-5pgp-mc2w-hjjx

Auth misconfiguration when multiple providers enabled

Priority LOW 11

An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised access under the following conditions: If a neo4j admin configures two or more OIDC providers AND c…

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00366 Published 2026-03-11 Fixed in 5.26.22, 2026.02 CWE-287
TI-2026-01192 CVE-2026-1497 · GHSA-pr32-4ghw-rwcv

Incorrect privilege assignment in composite databases

Priority LOW 19

Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.22 can lead to the following scenario: an admin that intends to give a user an access to a remote da…

CVSS 4.0LOW 2.0 Network Low privileges User interaction EPSS 0.00273 Published 2026-03-11 Fixed in 5.26.22, 2026.02 CWE-863