Advisories · Technology

JetBrains PyCharm.

Every CVE that names JetBrains PyCharm among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118697 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Improper certificate validation in JetBrains Toolbox App and others
- JetBrains Toolbox App
- JetBrains IntelliJ IDEA
- Weak cryptography or TLS
Not analysed yet 30 Oct 2026
CVE-2026-118696 CVE record

CVSS 8.0 High

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3…
- JetBrains IntelliJ IDEA
- JetBrains PyCharm
- CWE-299
Not analysed yet 30 Oct 2026
CVE-2026-75060 CVE record

CVSS 8.4 High

Missing authentication in JetBrains PyCharm
- JetBrains PyCharm
- Authentication bypass
Not analysed yet 17 Aug 2026
CVE-2026-75059 CVE record

CVSS 4.4 Medium

Cross-site scripting in JetBrains PyCharm
- JetBrains PyCharm
- Cross-site scripting (XSS)
Not analysed yet 17 Aug 2026
CVE-2026-65908 CVE record

CVSS 8.6 High

JetBrains PyCharm: In JetBrains PyCharm before 2026.1.4…
- JetBrains PyCharm
- CWE-829
Not analysed yet 23 Jul 2026
CVE-2026-49384 CVE record

CVSS 6.1 Medium

Cross-site scripting in JetBrains PyCharm
- JetBrains PyCharm
- Cross-site scripting (XSS)
Not analysed yet 29 May 2026
CVE-2026-25847 CVE record

CVSS 8.2 High

Cross-site scripting in JetBrains PyCharm
- JetBrains PyCharm
- Cross-site scripting (XSS)
Not analysed yet 9 Feb 2026
CVE-2024-37051 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Insufficiently protected credentials in JetBrains IntelliJ IDEA and others
- JetBrains IntelliJ IDEA
- JetBrains Aqua
- Hard-coded credentials
Not analysed yet 10 Jun 2024
CVE-2022-29820 CVE record

CVSS 3.0 Low

JetBrains PyCharm: In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network…
- JetBrains PyCharm
- CWE-1327
Not analysed yet 28 Apr 2022