https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:53:49.417405+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-neo4j-2021-34371 BIT-neo4j-2021-34371 2026-10-03T17:53:49.421925+00:00

Affected: Bitnami: neo4j

Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains.

 https://cve.radiocsirt.org/vuln/euvd-2026-28777 EUVD-2026-28777 2026-10-03T17:53:49.421975+00:00 EUVD-2026-28777 https://cve.radiocsirt.org/vuln/fkie_cve-2021-34371 fkie_cve-2021-34371 2026-10-03T17:53:49.421991+00:00

Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains.

 https://cve.radiocsirt.org/vuln/ghsa-pc4w-8v5j-29w9 GHSA-pc4w-8v5j-29w9 — Deserialization of Untrusted Data in Neo4j 2026-10-03T17:53:49.422014+00:00

Affected: Maven: org.neo4j:neo4j

Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains.

 https://cve.radiocsirt.org/vuln/gsd-2021-34371 gsd-2021-34371 2026-10-03T17:53:49.422034+00:00 gsd-2021-34371