Skip to contentJetbrains vulnerabilities
Newest
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge...CVE-2026-864956.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to...CVE-2026-864947.7 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to...CVE-2026-864936.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of...CVE-2026-864928.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization...CVE-2026-864913.5 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of...CVE-2026-864906.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private...CVE-2026-864896.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints...CVE-2026-864886.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 a crafted WebSocket message allowed read-only...CVE-2026-864873.1 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its...CVE-2026-864863.7 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket...CVE-2026-864853.5 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to...CVE-2026-864844.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was...CVE-2026-864835.4 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege...CVE-2026-864828.8 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted...CVE-2026-864814.3 Medium
- jetbrains hubIn JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service...CVE-2026-864809.8 Critical
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18788,
2026.1.14055,
2025.3.161254 missing authorisation...CVE-2026-864798.0 High
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.161254,
2026.1.14042 improper authentication in YouTrack...CVE-2026-86478Public exploit9.8 Critical
- aquaproj aquaaqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directoryCVE-2026-55569Fix available6.6 Medium
- jetbrains pycharmIn JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP...CVE-2026-750608.4 High
- jetbrains pycharmIn JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possibleCVE-2026-750594.4 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importersCVE-2026-750585.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE logCVE-2026-750576.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possibleCVE-2026-750567.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXECVE-2026-750555.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in...CVE-2026-750546.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpointCVE-2026-750535.4 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content...CVE-2026-750523.6 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was...CVE-2026-750518.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13901,
2026.2.17950 doS attack was possible via crafted type...CVE-2026-750507.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13903,
2026.2.17950 an authenticated user could read...CVE-2026-750496.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was...CVE-2026-750488.2 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the...CVE-2026-750476.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the...CVE-2026-750464.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.156085,
2026.1.13913,
2026.2.18112 an unauthenticated...CVE-2026-75045Public exploit9.1 Critical
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.156085,
2026.1.13914,
2026.2.18095 missing authorisation...CVE-2026-750448.1 High
- jetbrains ktorIn JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possibleCVE-2026-687625.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was...CVE-2026-63077In KEVPublic exploitEPSS 94.9%9.8 Critical
- anephenix hubHub: Unauthenticated WebSocket RPC Waiter Resource ExhaustionCVE-2026-73561Fix available7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possibleCVE-2026-659079.1 Critical
- jetbrains pycharmIn JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python...CVE-2026-659088.6 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was...CVE-2026-659068.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer...CVE-2026-648158.1 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote...CVE-2026-648148.6 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a...CVE-2026-6481310.0 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote...CVE-2026-6481210.0 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting...CVE-2026-648117.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification,...CVE-2026-648104.3 Medium
- jetbrains phpstormIn JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project...CVE-2026-648098.4 High
- jetbrains phpstormIn JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project...CVE-2026-648088.4 High
- Show moreLoading…