Advisories · Technology

JetBrains IntelliJ IDEA.

Every CVE that names JetBrains IntelliJ IDEA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118697 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Improper certificate validation in JetBrains Toolbox App and others
- JetBrains Toolbox App
- JetBrains IntelliJ IDEA
- Weak cryptography or TLS
Not analysed yet 30 Oct 2026
CVE-2026-118696 CVE record

CVSS 8.0 High

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3…
- JetBrains IntelliJ IDEA
- JetBrains PyCharm
- CWE-299
Not analysed yet 30 Oct 2026
CVE-2026-100256 CVE record

CVSS 7.8 High

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints…
- JetBrains IntelliJ IDEA
- CWE-829
Not analysed yet 30 Sept 2026
CVE-2026-86505 CVE record

CVSS 3.3 Low

Information disclosure in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Information disclosure
Not analysed yet 7 Sept 2026
CVE-2026-86504 CVE record

CVSS 7.8 High

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before…
- JetBrains IntelliJ IDEA
- CWE-829
Not analysed yet 7 Sept 2026
CVE-2026-86503 CVE record

CVSS 3.3 Low

Server-side request forgery in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Server-side request forgery (SSRF)
Not analysed yet 7 Sept 2026
CVE-2026-86502 CVE record

CVSS 8.4 High

Missing authentication in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Authentication bypass
Not analysed yet 7 Sept 2026
CVE-2026-86501 CVE record

CVSS 2.8 Low

Sensitive information in log files in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Information disclosure
Not analysed yet 7 Sept 2026
CVE-2026-75058 CVE record

CVSS 5.5 Medium

XML external entity injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- XML external entities (XXE)
Not analysed yet 17 Aug 2026
CVE-2026-75057 CVE record

CVSS 6.2 Medium

Sensitive information in log files in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Information disclosure
Not analysed yet 17 Aug 2026
CVE-2026-75056 CVE record

CVSS 7.8 High

OS command injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Command injection
Not analysed yet 17 Aug 2026
CVE-2026-75055 CVE record

CVSS 5.5 Medium

XML external entity injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- XML external entities (XXE)
Not analysed yet 17 Aug 2026
CVE-2026-75054 CVE record

CVSS 6.3 Medium

Server-side request forgery in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Server-side request forgery (SSRF)
Not analysed yet 17 Aug 2026
CVE-2026-75053 CVE record

CVSS 5.4 Medium

Server-side request forgery in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Server-side request forgery (SSRF)
Not analysed yet 17 Aug 2026
CVE-2026-75052 CVE record

CVSS 3.6 Low

Command injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Command injection
Not analysed yet 17 Aug 2026
CVE-2026-64815 CVE record

CVSS 8.1 High

Code injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Code injection
Not analysed yet 23 Jul 2026
CVE-2026-64814 CVE record

CVSS 8.6 High

Missing authorization in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Broken access control
Not analysed yet 23 Jul 2026
CVE-2026-64813 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible…
- JetBrains IntelliJ IDEA
- CWE-602
Not analysed yet 23 Jul 2026
CVE-2026-64812 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Missing authentication in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Authentication bypass
Not analysed yet 23 Jul 2026
CVE-2026-64811 CVE record

CVSS 7.8 High

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before…
- JetBrains IntelliJ IDEA
- CWE-829
Not analysed yet 23 Jul 2026
CVE-2026-64810 CVE record

CVSS 4.3 Medium

Cross-site scripting in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2026
CVE-2026-59792 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Path traversal in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Path traversal
Not analysed yet 10 Jul 2026
CVE-2026-49383 CVE record

CVSS 3.3 Low

XML external entity injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- XML external entities (XXE)
Not analysed yet 29 May 2026
CVE-2026-49382 CVE record

CVSS 4.5 Medium

Template injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Code injection
Not analysed yet 29 May 2026
CVE-2026-49367 CVE record

CVSS 8.0 High

Missing authorization in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Broken access control
Not analysed yet 29 May 2026
CVE-2026-49366 CVE record

CVSS 7.8 High

OS command injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Command injection
Not analysed yet 29 May 2026
CVE-2026-41882 CVE record

CVSS 7.4 High

Symlink following in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Path traversal
Not analysed yet 30 Apr 2026
CVE-2025-68269 CVE record

CVSS 5.4 Medium

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of…
- JetBrains IntelliJ IDEA
- CWE-349
Not analysed yet 16 Dec 2025
CVE-2025-57730 CVE record

CVSS 5.2 Medium

Cross-site scripting in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-57729 CVE record

CVSS 6.5 Medium

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to…
- JetBrains IntelliJ IDEA
- CWE-829
Not analysed yet 20 Aug 2025
CVE-2025-57728 CVE record

CVSS 6.5 Medium

Incorrect authorization in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Broken access control
Not analysed yet 20 Aug 2025
CVE-2025-57727 CVE record

CVSS 4.7 Medium

Cleartext transmission of sensitive information in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Weak cryptography or TLS
Not analysed yet 20 Aug 2025
CVE-2025-32054 CVE record

CVSS 3.3 Low

Sensitive information in log files in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Information disclosure
Not analysed yet 3 Apr 2025
CVE-2024-46970 CVE record

CVSS 3.3 Low

Cross-site scripting in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Cross-site scripting (XSS)
Not analysed yet 16 Sept 2024
CVE-2024-37051 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Insufficiently protected credentials in JetBrains IntelliJ IDEA and others
- JetBrains IntelliJ IDEA
- JetBrains Aqua
- Hard-coded credentials
Not analysed yet 10 Jun 2024
CVE-2024-24941 CVE record

CVSS 6.1 Medium

Improper input validation in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- CWE-20
Not analysed yet 6 Feb 2024
CVE-2024-24940 CVE record

CVSS 2.8 Low

Path traversal in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Path traversal
Not analysed yet 6 Feb 2024
CVE-2023-51655 CVE record

CVSS 6.3 Medium

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted…
- JetBrains IntelliJ IDEA
- CWE-349
Not analysed yet 21 Dec 2023
CVE-2023-39261 CVE record

CVSS 5.2 Medium

Execution with unnecessary privileges in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Privilege escalation
Not analysed yet 26 Jul 2023
CVE-2023-38069 CVE record

CVSS 3.3 Low

Improper check for unusual conditions in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- CWE-754
Not analysed yet 12 Jul 2023
CVE-2022-48433 CVE record

CVSS 6.1 Medium

Insufficiently protected credentials in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Hard-coded credentials
Not analysed yet 29 Mar 2023
CVE-2022-48432 CVE record

CVSS 5.2 Medium

In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.
- JetBrains IntelliJ IDEA
- CWE-1188
Not analysed yet 29 Mar 2023
CVE-2022-48431 CVE record

CVSS 4.5 Medium

Insufficient verification of data authenticity in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- CWE-345
Not analysed yet 29 Mar 2023
CVE-2022-48430 CVE record

CVSS 5.5 Medium

Information disclosure in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Information disclosure
Not analysed yet 29 Mar 2023
CVE-2022-47896 CVE record

CVSS 5.0 Medium

Template injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Code injection
Not analysed yet 22 Dec 2022
CVE-2022-47895 CVE record

CVSS 4.7 Medium

Cleartext transmission of sensitive information in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Weak cryptography or TLS
Not analysed yet 22 Dec 2022
CVE-2022-46828 CVE record

CVSS 5.2 Medium

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.
- JetBrains IntelliJ IDEA
- CWE-691
Not analysed yet 8 Dec 2022
CVE-2022-46827 CVE record

CVSS 3.9 Low

XML external entity injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- XML external entities (XXE)
Not analysed yet 8 Dec 2022
CVE-2022-46826 CVE record

CVSS 6.2 Medium

Path traversal in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Path traversal
Not analysed yet 8 Dec 2022
CVE-2022-46825 CVE record

CVSS 4.0 Medium

Information disclosure in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Information disclosure
Not analysed yet 8 Dec 2022
CVE-2022-46824 CVE record

CVSS 5.6 Medium

Buffer overflow in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Memory corruption
Not analysed yet 8 Dec 2022
CVE-2022-40978 CVE record

CVSS 7.5 High

Uncontrolled search path in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- CWE-427
Not analysed yet 19 Sept 2022
CVE-2022-37010 CVE record

CVSS 3.6 Low

Improper input validation in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- CWE-20
Not analysed yet 28 Jul 2022
CVE-2022-37009 CVE record

CVSS 3.9 Low

Code injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Code injection
Not analysed yet 28 Jul 2022
CVE-2022-29819 CVE record

CVSS 6.9 Medium

Code injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Code injection
Not analysed yet 28 Apr 2022
CVE-2022-29818 CVE record

CVSS 3.9 Low

Origin validation error in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- CWE-346
Not analysed yet 28 Apr 2022
CVE-2022-29817 CVE record

CVSS 3.9 Low

Cross-site scripting in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Cross-site scripting (XSS)
Not analysed yet 28 Apr 2022
CVE-2022-29816 CVE record

CVSS 2.8 Low

Injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Other injection
Not analysed yet 28 Apr 2022
CVE-2022-29815 CVE record

CVSS 6.9 Medium

Code injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Code injection
Not analysed yet 28 Apr 2022
CVE-2022-29814 CVE record

CVSS 6.9 Medium

Code injection in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Code injection
Not analysed yet 28 Apr 2022