Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,484All CVEsplus 19,164 rejected
- 614Last 24 hours4,924 in the last 7 days
- 18,767Last 30 days1,594 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 5 | 2 | 5 | 0 | 13 | 15 |
| 2025 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-92684 | Aggregation queries can bypass authentication restrictions in @neo4j/graphqlNeo4j · @neo4j/graphql | High8.7 |
| CVE-2026-92683 | Incomplete evaluation of multi-condition JWT where filter in @authentication in @neo4j/graphqlNeo4j · @neo4j/graphql | High8.6 |
| CVE-2026-92681 | @neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fieldsNeo4j · @neo4j/graphql | Critical9.3 |
| CVE-2026-92682 | @neo4j/graphql: authorization relationship and connection filters invert the "none" quantifierNeo4j · @neo4j/graphql | High8.6 |
| CVE-2026-19869 | Privilege Escalation via Dropped Field-Level @authenticationneo4j · graphql | High7.6 |
| CVE-2026-5423 | Subscription Authentication Bypass via Unverified connectionParams.jwtneo4j · graphql | High8.2 |
| CVE-2026-14587 | Unathenticated connection can hold Bolt channel openneo4j · Enterprise Edition | Medium5.5 |
| CVE-2026-1471 | Caching of authentication contextNeo4j · Enterprise edition | Low2.1 |
| CVE-2026-1524 | Auth misconfiguration when multiple providers enabledneo4j · Enterprise Edition | Low2.1 |
| CVE-2026-1497 | Incorrect privilege assignment in composite databasesneo4j · Enterprise Edition | Low2.0 |
| CVE-2026-1337 | Insufficient escaping of unicode characters in query logPublic exploitneo4j · Enterprise Edition | Low1.1 |
| CVE-2026-1622 | Unredacted data exposure in query.logneo4j · Enterprise Edition | Medium4.8 |
| CVE-2025-12738 | Enumeration of restricted property valueneo4j · Enterprise Edition | Low1.3 |
| CVE-2025-11602 | Untargeted information leak in Bolt protocol handshakeneo4j · Enterprise Edition | Medium6.3 |
| CVE-2025-10193 | Neo4j Cypher MCP server is vulnerable to DNS rebinding attacksneo4j · neo4j-cypher MCP server | High7.4 |