Skip to contentNeo4j Enterprise Edition vulnerabilities
- neo4j, neo4j community edition, enterprise edition +2 moreUnathenticated connection can hold Bolt channel openCVE-2026-14587Fix available5.5 Medium
- neo4j enterprise edition, neo4j +1 moreCaching of authentication contextCVE-2026-1471Fix available2.1 Low
- neo4j enterprise edition, neo4j +1 moreAuth misconfiguration when multiple providers enabledCVE-2026-1524Fix available2.1 Low
- neo4j enterprise edition, neo4j +1 moreIncorrect privilege assignment in composite databasesCVE-2026-1497Fix available2.0 Low
- neo4j community edition, neo4j, neo4j enterprise edition +2 moreInsufficient escaping of unicode characters in query logCVE-2026-1337Public exploitFix available1.1 Low
- neo4j community edition, enterprise edition +1 moreUnredacted data exposure in query.logCVE-2026-1622Fix available4.8 Medium
- neo4j enterprise editionEnumeration of restricted property valueCVE-2025-127381.3 Low
- neo4j community edition, enterprise edition +1 moreUntargeted information leak in Bolt protocol handshakeCVE-2025-116026.3 Medium