Advisories · Technology

JetBrains Hub.

Every CVE that names JetBrains Hub among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-123300 CVE record

CVSS 2.7 Low

Missing authorization in JetBrains Hub
- JetBrains Hub
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-123299 CVE record

CVSS 3.1 Low

Incorrect authorization in JetBrains Hub
- JetBrains Hub
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-123298 CVE record

CVSS 5.0 Medium

CRLF injection in JetBrains Hub
- JetBrains Hub
- Other injection
Not analysed yet 6 Nov 2026
CVE-2026-123297 CVE record

CVSS 6.8 Medium

JetBrains Hub: In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via…
- JetBrains Hub
- Authentication bypass
Not analysed yet 6 Nov 2026
CVE-2026-123296 CVE record

CVSS 7.5 High

Incorrect authorization in JetBrains Hub
- JetBrains Hub
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-123295 CVE record

CVSS 8.1 High

Incorrect authorization in JetBrains Hub
- JetBrains Hub
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-123294 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Mass assignment in JetBrains Hub
- JetBrains Hub
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-100266 CVE record

CVSS 7.7 High

Missing authorization in JetBrains Hub
- JetBrains Hub
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-86480 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in JetBrains Hub
- JetBrains Hub
- Authentication bypass
Not analysed yet 7 Sept 2026
CVE-2026-50242 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Missing authentication in JetBrains Hub
- JetBrains Hub
- Authentication bypass
Not analysed yet 19 Jun 2026
CVE-2026-56142 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Mass assignment in JetBrains Hub
- JetBrains Hub
- Broken access control
Not analysed yet 19 Jun 2026
CVE-2026-56141 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Weak random number generator in JetBrains Hub
- JetBrains Hub
- Weak cryptography or TLS
Not analysed yet 19 Jun 2026
CVE-2026-32229 CVE record

CVSS 6.8 Medium

Authentication bypass by spoofing in JetBrains Hub
- JetBrains Hub
- Authentication bypass
Not analysed yet 11 Mar 2026
CVE-2026-25848 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authentication in JetBrains Hub
- JetBrains Hub
- Authentication bypass
Not analysed yet 9 Feb 2026
CVE-2025-64683 CVE record

CVSS 5.3 Medium

Race condition in JetBrains Hub
- JetBrains Hub
- Race condition
Not analysed yet 10 Nov 2025
CVE-2025-64682 CVE record

CVSS 2.7 Low

Race condition in JetBrains Hub
- JetBrains Hub
- Race condition
Not analysed yet 10 Nov 2025
CVE-2025-64681 CVE record

CVSS 2.7 Low

Missing authorization in JetBrains Hub
- JetBrains Hub
- Broken access control
Not analysed yet 10 Nov 2025
CVE-2025-24456 CVE record

CVSS 6.7 Medium

Authentication bypass in JetBrains Hub
- JetBrains Hub
- Authentication bypass
Not analysed yet 21 Jan 2025
CVE-2024-50573 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains Hub
- JetBrains Hub
- Broken access control
Not analysed yet 28 Oct 2024
CVE-2024-38507 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains Hub
- JetBrains Hub
- Cross-site scripting (XSS)
Not analysed yet 18 Jun 2024
CVE-2022-48477 CVE record

CVSS 4.1 Medium

Server-side request forgery in JetBrains Hub
- JetBrains Hub
- Server-side request forgery (SSRF)
Not analysed yet 24 Apr 2023
CVE-2022-48429 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains Hub
- JetBrains Hub
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2023
CVE-2022-45471 CVE record

CVSS 3.5 Low

Resource allocation without limits in JetBrains Hub
- JetBrains Hub
- Denial of service
Not analysed yet 18 Nov 2022
CVE-2022-34894 CVE record

CVSS 3.5 Low

Improper access control in JetBrains Hub
- JetBrains Hub
- Broken access control
Not analysed yet 1 Jul 2022
CVE-2022-29811 CVE record

CVSS 6.1 Medium

Cross-site scripting in JetBrains Hub
- JetBrains Hub
- Cross-site scripting (XSS)
Not analysed yet 28 Apr 2022