Advisories · Technology

JetBrains Datalore.

Every CVE that names JetBrains Datalore among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-123292 CVE record

CVSS 2.7 Low

JetBrains Datalore: In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users…
- JetBrains Datalore
- CWE-1464
Not analysed yet 6 Nov 2026
CVE-2026-123291 CVE record

CVSS 4.3 Medium

Insecure direct object reference in JetBrains Datalore
- JetBrains Datalore
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-123290 CVE record

CVSS 5.3 Medium

Information disclosure in JetBrains Datalore
- JetBrains Datalore
- Information disclosure
Not analysed yet 6 Nov 2026
CVE-2026-123289 CVE record

CVSS 5.4 Medium

Incorrect authorization in JetBrains Datalore
- JetBrains Datalore
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-123288 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains Datalore
- JetBrains Datalore
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2026
CVE-2026-123287 CVE record

CVSS 5.9 Medium

Incorrect authorization in JetBrains Datalore
- JetBrains Datalore
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-123286 CVE record

CVSS 5.9 Medium

Incorrect authorization in JetBrains Datalore
- JetBrains Datalore
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-123285 CVE record

CVSS 6.3 Medium

Argument injection in JetBrains Datalore
- JetBrains Datalore
- Command injection
Not analysed yet 6 Nov 2026
CVE-2026-123284 CVE record

CVSS 6.5 Medium

Incorrect authorization in JetBrains Datalore
- JetBrains Datalore
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-123283 CVE record

CVSS 6.8 Medium

JetBrains Datalore: In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a…
- JetBrains Datalore
- CWE-1464
Not analysed yet 6 Nov 2026
CVE-2026-123282 CVE record

CVSS 7.4 High

JetBrains Datalore: In JetBrains Datalore before 2026.4 missing expiration validation of account tokens…
- JetBrains Datalore
- CWE-672
Not analysed yet 6 Nov 2026
CVE-2026-123281 CVE record

CVSS 7.5 High

Argument injection in JetBrains Datalore
- JetBrains Datalore
- Command injection
Not analysed yet 6 Nov 2026
CVE-2026-123280 CVE record

CVSS 8.1 High

Incorrect authorization in JetBrains Datalore
- JetBrains Datalore
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-123279 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Incorrect authorization in JetBrains Datalore
- JetBrains Datalore
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-111093 CVE record

CVSS 7.5 High

Path traversal in JetBrains Datalore
- JetBrains Datalore
- Path traversal
Not analysed yet 15 Oct 2026
CVE-2026-32745 CVE record

CVSS 6.3 Medium

JetBrains Datalore: In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure…
- JetBrains Datalore
- CWE-614
Not analysed yet 13 Mar 2026