EE
Product
Enterprise edition
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 4Low 1
Watch
Add Enterprise edition to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1524 | 9.8 | Mar 11 | Auth misconfiguration when multiple providers enabled Affected: 4.4.0 before 5.26.22; 2025.01 before 2026.02 |
| CVE-2026-14587 | 7.5 | Aug 5 | Unathenticated connection can hold Bolt channel open Affected: 2025.01 before 2026.07; 5.0 before 5.26.29 |
| CVE-2026-1497 | 7.2 | Mar 11 | Incorrect privilege assignment in composite databases Affected: 5.0 before 5.26.22; 2025.01 before 2026.02 |
| CVE-2026-1471 | 6.5 | Mar 11 | Caching of authentication context Affected: 2025.01 before 2026.01.4; 4.4.0 before 5.26.22 |
| CVE-2025-11602 | 6.3 | Oct 31 | Untargeted information leak in Bolt protocol handshake Affected: 5.26.0 before 5.26.15; 2025.1.0 before 2025.10.1 |
| CVE-2026-1337 | 5.4 | Feb 6 | Insufficient escaping of unicode characters in query log Affected: before 2026.01.0 |
| CVE-2026-1622 | 4.8 | Feb 4 | Unredacted data exposure in query.log Affected: 2025.01 before 2026.01.3; 5.0 before 5.26.21; 4.4 before 4.4.48 |
| CVE-2025-12738 | 1.3 | Jan 22 | Enumeration of restricted property value Affected: before 2025.11.2; before 5.26.17 |
Showing 8