Neo4j 2026.x — End of Life
Active Critical risk6 releases in this series6 CVEs
Neo4j 2026.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 2026.06 | Jul 8, 2026 | — | No | 2026.06.0 | Active | |
| 2026.05 | May 28, 2026 | — | Jul 8, 2026 | 2026.05.0 | EOL | |
| 2026.04 | Apr 23, 2026 | — | May 28, 2026 | 2026.04.0 | EOL | |
| 2026.03 | Apr 2, 2026 | — | Apr 23, 2026 | 2026.03.1 | EOL | |
| 2026.02 | Mar 20, 2026 | — | Apr 2, 2026 | 2026.02.3 | EOL | |
| 2026.01 | Feb 10, 2026 | — | Mar 6, 2026 | 2026.01.4 | EOL |
CVEs affecting Neo4j 2026.x (6)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-1524 | CRITICAL | 9.8 | 0.32% | — | 2026.02 | An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised… | Mar 11, 2026 |
| CVE-2026-1524 | CRITICAL | 9.8 | 0.32% | — | 2026.01 | An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised… | Mar 11, 2026 |
| CVE-2026-1471 | MEDIUM | 6.5 | 0.24% | — | 2026.01 | Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticat… | Mar 11, 2026 |
| CVE-2026-1497 | HIGH | 7.2 | 0.24% | — | 2026.02 | Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.… | Mar 11, 2026 |
| CVE-2026-1497 | HIGH | 7.2 | 0.24% | — | 2026.01 | Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.… | Mar 11, 2026 |
| CVE-2026-1337 | MEDIUM | 5.4 | 0.21% | — | 2026.01 | Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can… | Feb 6, 2026 |
Frequently asked questions
Is Neo4j 2026 end of life?
Partially. Some Neo4j 2026.x releases have reached EOL. Check the version table above for the exact status of each sub-release.
What CVEs affect Neo4j 2026?
There are 6 CVEs tracked for Neo4j 2026.x, including 2 critical severity issues. See the full list above with CVSS and EPSS scores.
What is the latest Neo4j 2026 version?
The latest Neo4j 2026.x patch release is 2026.06.0, released on July 2, 2026. Always run the latest patch to benefit from all security fixes.
When was Neo4j 2026 first released?
Neo4j 2026.0 was initially released on July 8, 2026. See the full version timeline in the table above.
Is it safe to run Neo4j 2026 in production?
Neo4j 2026 is still supported and safe for production use. Ensure you are running the latest patch version (2026.06.0) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA