768 matches found
CVE-2026-86505
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace...
CVE-2026-86502
JetBrains IntelliJ IDEA versions before 2026.2.2 contain a vulnerability in the IJent gRPC server , where missing TLS encryption and authentication allowed an attacker with local access to achieve arbitrary code execution on Remote Development hosts. The CVSS 3.1 score is 8.4 (High) , reflecting ...
CVE-2026-86502
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...
CVE-2026-86501
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...
CVE-2026-86501
JetBrains IntelliJ IDEA versions prior to 2026.2.2 allow terminal command input to be written to the application's idea.log file. This is a low-severity local information disclosure (CVSS 3.1 score 2.8 , vector AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) requiring local access, low privileges, and user ...
CVE-2026-86502
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...
CVE-2026-86501
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...
EUVD-2026-72518
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...
EUVD-2026-72517
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...
PT-2026-86873
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log...
Malicious code in @yane88/idea-2026.2-06 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90e3a6b453069411d90d07eaafa27ddda377ecce1763a7f5587c65c65a1a83b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15656 Malicious code in @yane88/idea-2026.2-06 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90e3a6b453069411d90d07eaafa27ddda377ecce1763a7f5587c65c65a1a83b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
JetBrains IntelliJ IDEA < 2026.1.5 Git Credential Disclosure
The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.1.5. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains IntelliJ IDEA before 2026.1.5 Git credentials were written in plaintext to the IDE log. CVE-2026-75057 Note that Nessus h...
JetBrains IntelliJ IDEA < 2026.2.1 Multiple Vulnerabilities
The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains IntelliJ IDEA before 2026.2.1 RCE via Markdown export tool was possible. CVE-2026-75056 - In JetBrains IntelliJ IDEA before 2026.2.1 SSR...
CVE-2026-75052
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects...
CVE-2026-75055
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...
CVE-2026-75054
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...