CVE-2026-1337General(neo4j / neo4j)

LOWCVSS 5.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01. Proof of concept exploit: https://github.com/JoakimBulow/CVE-2026-1337

neo4j CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/JoakimBulow/CVE-2026-1337

Weakness type (CWE)

CWE-117

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

neo4j

Threat summary

5 mentions across 5 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
General: 4 classified signals
Disclosure: 1 classified signal
Peaked 4d ago at 1 mentions (2026-01-30); latest day: 1
5 total mentions across 5 days

Affected systems

Vendors

neo4j

Products

neo4j

Deep dive

Activity timeline5 mentions / 5d

Signal classification2 categories

General

480.0%

Disclosure

120.0%

Classification over time

Date	Total	Labels

2026-01-30	1	General1
2026-03-28	1	General1
2026-04-01	1	Disclosure1
2026-07-04	1	General1
2026-07-22	1	General1

Full discourse5 posts

MrKay@mr_kay796d
General
Wrap up the TryHackMe Search Skills room! Great practical lab mapping active threats by simulating Shodan OSINT scans, digging into a critical CVSS 10 SQLi vulnerability (CVE-2026-1337) and triaging AgentTesla infostealer samples #Cybersecurity #ThreatIntelligence https://t.co/GJhcZSCPcJ
Post summary
The post describes a TryHackMe lab that explored CVE‑2026‑1337, a critical SQL injection vulnerability with CVSS 10, through simulated Shodan scans and analysis of AgentTesla samples.
5012721.2K
919 followersView on X
Avelino Morganti@AvelinoReAu194d
General
@Tramas3030 CVE-2026-1337: Falha no mecanismo entre o dispositivo e a cadeira.
Post summary
The text references CVE‑2026‑1337 but provides no additional details, patches, exploits, or claims of active exploitation, leaving only a general mention.
20070342
31.8K followersView on X
Lyrie.ai@lyrie_ai78d
General
CVE-2026-1337. Source: X search for vulnerability critical 2026 Posted: 2026-07-04T17:54:01.000Z Likes: 13
Post summary
The post merely lists the CVE identifier without additional information, indicating an existing vulnerability but providing no concrete details.
1000041
326 followersView on X
OrionDeimos@OrionDeimos190d
Disclosure
URGENT – Disclosure de sécurité : « Milk Sad 2.0 » (CVE-2026-1337) Faille critique dans la génération d’adresses Ledger & MetaMask (2023-2025)Si vous avez généré une adresse (ou un compte Ethereum/Bitcoin/etc.) avec un Ledger Nano S/X/Stax ou MetaMask entre le 1er janvier 2023
Post summary
The post announces a new critical flaw (CVE‑2026‑1337) affecting address generation in Ledger and MetaMask wallets, alerting users who generated addresses since January 1, 2023.
1000086
1.0K followersView on X
LulzClumsy@LulzClumsy252d
General
CVE-2026-1337
Post summary
The provided text contains only the CVE identifier CVE-2026-1337 with no accompanying details or context.
0000168
227 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	neo4j	neo4j	-	-	-
App	neo4j	neo4j	-	-	-

Explore more

Back to dashboard neo4j CVEs neo4j vulnerabilities

What researchers are saying

CVE-2026-1337

Avelino Morganti[verified]@AvelinoReAuGeneral

The text references CVE‑2026‑1337 but provides no additional details, patches, exploits, or claims of active exploitation, leaving only a general mention.

Lyrie.ai[verified]@lyrie_aiGeneral

The post merely lists the CVE identifier without additional information, indicating an existing vulnerability but providing no concrete details.

MrKay@mr_kay7General

The post describes a TryHackMe lab that explored CVE‑2026‑1337, a critical SQL injection vulnerability with CVSS 10, through simulated Shodan scans and analysis of AgentTesla samples.

OrionDeimos@OrionDeimosDisclosure

The post announces a new critical flaw (CVE‑2026‑1337) affecting address generation in Ledger and MetaMask wallets, alerting users who generated addresses since January 1, 2023.

LulzClumsy@LulzClumsyGeneral

The provided text contains only the CVE identifier CVE-2026-1337 with no accompanying details or context.