872 matches found
CVE-2026-64814: Missing Authorization
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session...
PT-2026-63968
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session...
PT-2026-63969
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2 Description Arbitrary code injection is possible through the use of UI Designer form files. Recommendations Update JetBrains IntelliJ IDEA to version 2026.2...
JetBrains IntelliJ IDEA < 2026.1.4 Code Execution via Path Traversal (CVE-2026-59792)
The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.1.4. It is, therefore, affected by a code execution vulnerability: - Code execution via path traversal in project workspace ID handling was possible. CVE-2026-59792 Note that Nessus has not tested for this issue...
CVE-2026-59792
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
CVE-2026-59792
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
EUVD-2026-42910
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
CVE-2026-59792
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
CVE-2026-59792
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
CVE-2026-59792
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
CVE-2026-59792
CVE-2026-59792 affects JetBrains IntelliJ IDEA prior to 2026.1.4, with a path-traversal weakness in project workspace ID handling that could enable code execution. The connected sources corroborate a 2026.2-era code execution claim tied to this path traversal issue. The available documents do not...
PT-2026-57183
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.1.4 JetBrains IntelliJ IDEA versions prior to 2026.2 Description Improper handling of the project workspace ID allows for a relative path traversal, which can be leveraged to achieve remote code...
CVE-2026-59792: Relative Path Traversal
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
The vulnerability of the IntelliJ IDEA integrated development environment lies in the improper definition of symbolic links during file access, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the IntelliJ IDEA integrated development environment is related to the incorrect definition of symbolic links during file access. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-49383
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible...
CVE-2026-49382
In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin...
CVE-2026-41882
In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server...
CVE-2026-49366
In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion...
JetBrains IntelliJ IDEA < 2026.1.1 Multiple Vulnerabilities
The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.1.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion CVE-2026-49366 - In JetBrains IntelliJ IDEA before...