Skip to contentJetbrains vulnerabilities
Newest
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leading to RCE on the...CVE-2026-1062188.8 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integrationCVE-2026-1034975.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users'...CVE-2026-1034965.4 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation...CVE-2026-1034954.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group...CVE-2026-1034946.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possibleCVE-2026-1034938.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachmentsCVE-2026-1034926.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading...CVE-2026-1034916.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group linksCVE-2026-1034907.2 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was...CVE-2026-1034892.0 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to...CVE-2026-1034887.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template...CVE-2026-1002803.1 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentialsCVE-2026-1002796.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide...CVE-2026-1002784.9 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a...CVE-2026-1002778.9 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility...CVE-2026-1002765.9 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was...CVE-2026-1002756.9 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification...CVE-2026-1002746.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed...CVE-2026-1002738.2 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template...CVE-2026-1002724.9 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed...CVE-2026-1002712.7 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose...CVE-2026-1002703.3 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be...CVE-2026-1002694.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other...CVE-2026-1002687.7 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule...CVE-2026-1002675.9 Medium
- jetbrains hubIn JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send...CVE-2026-1002667.7 High
- jetbrains riderIn JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user...CVE-2026-1002654.8 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by...CVE-2026-1002642.7 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was...CVE-2026-1002634.7 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only...CVE-2026-1002627.6 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible...CVE-2026-1002615.4 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a...CVE-2026-1002605.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by...CVE-2026-1002594.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read...CVE-2026-1002584.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF...CVE-2026-1002574.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was...CVE-2026-1002567.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 administrator account takeover was...CVE-2026-1002558.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 authenticated users could execute...CVE-2026-1002548.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 sandbox escape leading to code...CVE-2026-1002538.8 High
- jetbrains golandIn JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected...CVE-2026-865065.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to...CVE-2026-865053.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a...CVE-2026-865047.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via...CVE-2026-865033.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC...CVE-2026-865028.4 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.logCVE-2026-865012.8 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project...CVE-2026-865005.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any...CVE-2026-864994.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.160480,
2026.1.14047 pUT requests on link sub-resources...CVE-2026-864987.7 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication...CVE-2026-864976.8 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters...CVE-2026-864964.3 Medium
- Show moreLoading…