Lucene search
+L

66 matches found

NVD
NVD
•added 2026/10/15 4:17 p.m.•15 views

CVE-2026-111091

In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration...

7.8CVSS0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/15 3:29 p.m.•42 views

CVE-2026-111091

In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration...

7.8CVSS0.00135EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/15 3:29 p.m.•28 views

CVE-2026-111091

In JetBrains Junie CLI versions prior to 26.8.3 , an attacker could achieve code execution by leveraging an untrusted project's MCP server configuration . This vulnerability is associated with CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The risk is rated as HIGH with a CVS...

7.8CVSS6AI score0.00135EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/15 3:29 p.m.•56 views

EUVD-2026-102144

In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration...

7.8CVSS6AI score0.00135EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/15 12:00 a.m.•11 views

PT-2026-114987

Name of the Vulnerable Software and Affected Versions JetBrains Junie CLI versions prior to 26.8.3 Description Remote code execution is possible through the MCP server configuration of an untrusted project. In headless environments such as Continuous Integration CI systems, the software is design...

7.8CVSS6AI score0.00135EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/04/24 12:00 a.m.•26 views

JetBrains Junie Arbitrary Command Execution

The vulnerability of JetBrains Junie software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

5.8CVSS7.2AI score0.00351EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/20 7:23 p.m.•17 views

CVE-2026-41153

In JetBrains Junie before 252.549.29 command execution was possible via malicious project file...

9.8CVSS5.9AI score0.00351EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/17 3:31 p.m.•27 views

EUVD-2026-23430

In JetBrains Junie before 252.549.29 command execution was possible via malicious project file...

5.8CVSS5.9AI score0.00351EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/17 3:16 p.m.•20 views

CVE-2026-41153

In JetBrains Junie before 252.549.29 command execution was possible via malicious project file...

9.8CVSS0.00351EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/17 2:29 p.m.•14 views

CVE-2026-41153

In JetBrains Junie before 252.549.29 command execution was possible via malicious project file...

5.8CVSS5.9AI score0.00351EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/17 2:29 p.m.•11 views

CVE-2026-41153

In JetBrains Junie before 252.549.29 command execution was possible via malicious project file...

5.8CVSS6.4AI score0.00351EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/17 2:29 p.m.•44 views

CVE-2026-41153

CVE-2026-41153 affects JetBrains Junie prior to 252.549.29. Affected component is the project file handling, enabling command execution via a malicious project file. Public sources (PT-2026-33457) recommend updating to version 252.549.29 or later as a remediation. CVSS data in the initial record ...

9.8CVSS6.4AI score0.00351EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/04/17 2:29 p.m.•50 views

CVE-2026-41153

In JetBrains Junie before 252.549.29 command execution was possible via malicious project file...

5.8CVSS0.00351EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/17 12:00 a.m.•26 views

JetBrains June security vulnerabilities

JetBrains Junie is a coding proxy provided by the Czech company JetBrains. Versions of JetBrains Junie prior to 252.549.29 contained security vulnerabilities, which were due to the possibility of executing commands through malicious project files...

9.8CVSS6.1AI score0.00351EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/17 12:00 a.m.•9 views

CVE-2026-41153: Improper Neutralization of Special Elements used in a Command

In JetBrains Junie before 252.549.29 command execution was possible via malicious project file...

9.8CVSS5.8AI score0.00351EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/17 12:00 a.m.•33 views

PT-2026-33457

Name of the Vulnerable Software and Affected Versions JetBrains Junie versions prior to 252.549.29 Description Command execution is possible through the use of a malicious project file. Recommendations Update to version 252.549.29 or later...

5.8CVSS5.9AI score0.00351EPSS
SaveExploits0References4
The Hacker News
The Hacker News
•added 2025/12/06 3:24 p.m.•38 views

Researcher Uncovers 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks

Over 30 security vulnerabilities have been disclosed in various artificial intelligence AI-powered Integrated Development Environments IDEs that combine prompt injection primitives with legitimate features to achieve data exfiltration and remote code execution. The security shortcomings have been...

9.8CVSS7.6AI score0.06583EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
•added 2025/11/25 12:00 a.m.•45 views

Junie Component Unauthorized Access

The vulnerability of the Junie component of the JetBrains Hub software for account management is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

9.6CVSS6.6AI score0.00003EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/11/14 12:00 a.m.•18 views

JetBrains YouTrack < 2025.3.104432 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2025.2.92387. It is, therefore, affected by multiple vulnerabilities as referenced in the advisory. - In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure. CVE-2025-64685 - ...

8.1CVSS6.5AI score0.00336EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
•added 2025/11/11 1:44 p.m.•23 views

CVE-2025-64688

In JetBrains YouTrack before 2025.3.104432 missing VCS URL validation allowed delegation to unauthorized repositories from the Junie widget...

7.4CVSS6.8AI score0.0001EPSS
SaveExploits0References1
Rows per page
Query Builder