Skip to contentJetbrains vulnerabilities
Newest
- jetbrains webstormIn JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied...CVE-2026-648077.8 High
- jetbrains webstormIn JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project...CVE-2026-648068.4 High
- jetbrains webstormIn JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project...CVE-2026-648058.4 High
- jetbrains webstormIn JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project...CVE-2026-648048.4 High
- jetbrains golandIn JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project...CVE-2026-648037.8 High
- jetbrains golandIn JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project...CVE-2026-648027.8 High
- jetbrains golandIn JetBrains GoLand before 2026.2 sensitive configuration values written to log files by defaultCVE-2026-648003.5 Low
- jetbrains hubMeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflowCVE-2026-476907.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3...CVE-2026-6242210.0 Critical
- jetbrains aquaWordPress Aqua theme <= 5.1.2 - Local File Inclusion vulnerabilityCVE-2026-577897.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was...CVE-2026-614923.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper...CVE-2026-597968.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possibleCVE-2026-59795Public exploit8.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent...CVE-2026-597947.3 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS...CVE-2026-597938.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project...CVE-2026-597929.6 Critical
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possibleCVE-2026-597913.5 Low
- jetbrains kotlinJetBrains Kotlin: Unsafe Deserialization in Kotlin Build Cache Enables Code ExecutionCVE-2026-53914Fix available6.7 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype...CVE-2026-579262.6 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries...CVE-2026-579254.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user...CVE-2026-579244.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations...CVE-2026-579235.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possibleCVE-2026-579223.1 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private...CVE-2026-579214.3 Medium
- jetbrains hubIn JetBrains Hub before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,...CVE-2026-5024210.0 Critical
- jetbrains hubIn JetBrains Hub before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,...CVE-2026-561429.6 Critical
- jetbrains hubIn JetBrains Hub before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,...CVE-2026-561419.8 Critical
- jetbrains golandIn JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project...CVE-2026-539157.1 High
- jetbrains runtime, sensiolabs symfony +1 moreSymfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv MismatchCVE-2026-47767Fix available8.3 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of...CVE-2026-493866.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to...CVE-2026-493856.5 Medium
- jetbrains pycharmIn JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possibleCVE-2026-493846.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possibleCVE-2026-493833.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in...CVE-2026-493824.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possibleCVE-2026-493813.4 Low
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possibleCVE-2026-493803.1 Low
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 credentials could be exposed in thread namesCVE-2026-493796.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletionCVE-2026-493784.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parametersCVE-2026-493774.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 insufficient username validation in the SAML pluginCVE-2026-493766.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1,
2025.11.5 reflected XSS was possible on the repository...CVE-2026-493756.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration...CVE-2026-493747.6 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection...CVE-2026-49373EPSS 32.7%7.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1,
2025.11.5 unauthenticated SSRF via build status was possibleCVE-2026-493727.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possibleCVE-2026-493717.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requestsCVE-2026-493703.4 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups...CVE-2026-493694.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possibleCVE-2026-493688.7 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user accountCVE-2026-493678.0 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completionCVE-2026-493667.8 High
- Show moreLoading…