How severe is CVE-2026-1471?

CVE-2026-1471 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.

Is CVE-2026-1471 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-1471?

CVE-2026-1471 affects Neo4j. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-1471?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2026-1471 have an EU (EUVD) identifier?

Yes. CVE-2026-1471 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-11210.

When was CVE-2026-1471 published?

CVE-2026-1471 was published on 2026-03-11 and last updated on 2026-06-17.

CVE-2026-1471

CVE-2026-1471 is a medium-severity vulnerability in Neo4j with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-863.

Key facts

Severity: Medium (CVSS 3.x base score 6.5)
CVSS v4: 2.1
EPSS exploit prediction: 0% (15th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2026-11210
Weakness: CWE-863
Affected product: Neo4j
Published: 2026-03-11
Last modified: 2026-06-17

Description

Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO (UserInfo endpoint). We recommend upgrading to versions 2026.01.4 (or 5.26.22) where the issue is fixed.

Frequently asked questions

What is CVE-2026-1471?: Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first user who authenticated after restart. The issue is limited to certain non-default configurations of SSO (UserInfo endpoint). We recommend upgrading to versions 2026.01.4 (or 5.26.22) where the issue is fixed.
How severe is CVE-2026-1471?: CVE-2026-1471 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
Is CVE-2026-1471 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-1471?: CVE-2026-1471 affects Neo4j. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-1471?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2026-1471 have an EU (EUVD) identifier?: Yes. CVE-2026-1471 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-11210.
When was CVE-2026-1471 published?: CVE-2026-1471 was published on 2026-03-11 and last updated on 2026-06-17.

References

https://neo4j.com/security/CVE-2026-1471

Affected products (1)

cpe:2.3:a:neo4j:neo4j:*:*:*:*:enterprise:*:*:*

More vulnerabilities in Neo4j

CVE-2026-1524 — Critical (CVSS 9.8): An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to…
CVE-2021-34371 — Critical (CVSS 9.8): Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects,…
CVE-2018-18389 — Critical (CVSS 9.8): Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9, the setting of LDAP for…
CVE-2026-1497 — High (CVSS 7.2): Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and…
CVE-2013-7259 — Medium (CVSS 6.8): Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the…
CVE-2024-34517 — Medium (CVSS 6.5): The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker…

All CVEs affecting Neo4j →

Other CWE-863 (Incorrect Authorization) vulnerabilities

CVE-2026-48286 — Critical (CVSS 10.0): Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization…
CVE-2026-48303 — Critical (CVSS 10.0): Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization…
CVE-2026-44330 — Critical (CVSS 10.0): free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the…
CVE-2026-46595 — Critical (CVSS 10.0): Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…
CVE-2026-33105 — Critical (CVSS 10.0): Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over…
CVE-2026-32213 — Critical (CVSS 10.0): Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Browse all CWE-863 (Incorrect Authorization) vulnerabilities →