872 matches found
CVE-2026-86504
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...
CVE-2026-86502
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...
CVE-2026-86502
JetBrains IntelliJ IDEA versions before 2026.2.2 contain a vulnerability in the IJent gRPC server , where missing TLS encryption and authentication allowed an attacker with local access to achieve arbitrary code execution on Remote Development hosts. The CVSS 3.1 score is 8.4 (High) , reflecting ...
CVE-2026-86501
JetBrains IntelliJ IDEA versions prior to 2026.2.2 allow terminal command input to be written to the application's idea.log file. This is a low-severity local information disclosure (CVSS 3.1 score 2.8 , vector AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) requiring local access, low privileges, and user ...
CVE-2026-86501
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...
CVE-2026-86502
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...
EUVD-2026-72518
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...
EUVD-2026-72517
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...
CVE-2026-86501
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...
PT-2026-86875
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...
PT-2026-86876
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...
PT-2026-86877
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...
CVE-2026-86503: Server-Side Request Forgery (SSRF)
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...
CVE-2026-86501: Insertion of Sensitive Information into Log File
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...
CVE-2026-86502: Missing Authentication for Critical Function
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...
CVE-2026-86504: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution...
PT-2026-86873
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...
CVE-2026-86505: Insertion of Sensitive Information Into Sent Data
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...
PT-2026-86874
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...
Malicious code in @yane88/idea-2026.2-06 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90e3a6b453069411d90d07eaafa27ddda377ecce1763a7f5587c65c65a1a83b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...