872 matches found
CVE-2026-75052
JetBrains IntelliJ IDEA versions prior to 2026.2.1 are vulnerable to command execution via crafted Markdown preview content in trusted projects. The vulnerability is local and requires user interaction to open a malicious Markdown file, resulting in low confidentiality and integrity impact with n...
CVE-2026-75053
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
CVE-2026-75052
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects...
CVE-2026-75053
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
EUVD-2026-60251
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects...
CVE-2026-75052
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects...
CVE-2026-75056: Improper Neutralization of Special Elements used in an OS Command
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
PT-2026-76705
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2.1 Description Remote Code Execution RCE is possible through the Markdown export tool. Recommendations Update to version 2026.2.1...
CVE-2026-75055: Improper Restriction of XML External Entity Reference
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...
CVE-2026-75052: Improper Neutralization of Special Elements used in a Command
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects...
PT-2026-76701
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects...
PT-2026-76706
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
CVE-2026-75057: Insertion of Sensitive Information into Log File
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...
PT-2026-76702
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
CVE-2026-75058: Improper Restriction of XML External Entity Reference
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers...
PT-2026-76703
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects...
CVE-2026-75054: Server-Side Request Forgery (SSRF)
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects...
CVE-2026-75053: Server-Side Request Forgery (SSRF)
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...