PT-2026-70838

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue exists where a party possessing a valid client certificate and a corresponding user account can authenticate using certificate-based authentication. This occurs even if an...

BIT-NEO4J-2026-1524 Auth misconfiguration when multiple providers enabled

An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised access under the following conditions: If a neo4j admin configures two or more OIDC providers AND configures one or more of them to be an authorization provider AND configures...