THREAT OPS › Threat News › [NVD] CVE-2026-1524 (CRITICAL 9.8) — An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised access under the following conditions:
If a neo4j admin configures two or more OIDC providers AND configures one or more of them to be an authorization provi
[NVD] CVE-2026-1524 (CRITICAL 9.8) — An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised access under the following conditions: If a neo4j admin configures two or more OIDC providers AND configures one or more of them to be an authorization provi
CVE-2026-1524 CVSS: 9.8 CRITICAL Published: 2026-03-11T17:16:54.477
An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised access under the following conditions:
If a neo4j admin configures two or more OIDC providers AND configures one or more of them to be an authorization provider AND configures one or more of them to be authen
Indicators of compromise
- CVE-2026-1524cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-1524