Threats Tagged 'cve-2026-19869'
View all threats tagged with 'cve-2026-19869'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-19869'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-19869 is an authorization bypass vulnerability in the neo4j/graphql library affecting versions 5.2.0 through 5.12.14, 6.0.0 through 6.6.4, and 7.0.0 through 7.5.9. The flaw occurs when both type-level and field-level @authentication rules are defined on the same operation type; only the type-level rule is enforced, causing stricter field-level rules to be ignored. This allows users with a valid token meeting the broader type-level requirements but lacking stricter field-level permissions (e.g., admin role) to access restricted fields. No token forgery is involved, but legitimate non-admin tokens can bypass intended restrictions. The vulnerability has a CVSS 4.0 score of 7.6 (high severity). Join the discussion | CVE Database V5 | 08/18/2026, 16:35:19 UTC Added: 08/18/2026, 16:54:49 UTC |
Showing 1 to 1 of 1 result