42 matches found
CVE-2026-75059
In JetBrains PyCharm before 2026.2.1, the Quick Documentation feature allows local code execution with no privileges required. Attack requires user interaction, rated CVSS 4.4 (MEDIUM). Fix: upgrade to 2026.2.1. No in-the-wild exploitation reported. Reference: https://www.jetbrains.com/privacy-se...
CVE-2026-75059
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...
CVE-2026-75059
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...
CVE-2026-75060
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...
EUVD-2026-60258
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...
EUVD-2026-60259
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...
PT-2026-76708
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...
PT-2026-76709
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...
JetBrains PyCharm < 2026.1.4 / 2026.2 Arbitrary Code Execution
According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2026.1.4. It is, therefore, affected by an arbitrary code execution vulnerability. In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was...
CVE-2026-65908
In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open...
CVE-2026-65908
In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open...
CVE-2026-65908
JetBrains PyCharm is affected by CVE-2026-65908. In PyCharm before 2026.1.4 (and 2026.2), an attacker could achieve arbitrary code execution by opening a malicious Python executable in an untrusted project. Root cause is likely processing of Python executables on project open; CVSSv3.1 indicates ...
EUVD-2026-48252
In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open...
CVE-2026-49384
In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible...
JetBrains PyCharm < 2025.3.4 Stored XSS
According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2025.3.4. It is, therefore, affected by a stored cross-site scripting XSS vulnerability in Jupyter notebook Markdown cells. In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook...
CVE-2026-49384
In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible...
CVE-2026-49384
JetBrains PyCharm before 2025.3.4 is affected by a stored XSS vulnerability in Jupyter notebook Markdown cells. The CVE notes untrusted content in Markdown cells can be rendered, enabling potential script execution. Supported data: CVSS 3.1 base score 6.1 (Network attack vector, required user int...
CVE-2026-49384
In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible...
PT-2026-44964
Name of the Vulnerable Software and Affected Versions JetBrains PyCharm versions prior to 2025.3.4 Description Stored Cross-Site Scripting XSS is possible within Jupyter notebook Markdown cells. Cross-Site Scripting is a type of security flaw where malicious scripts are injected into trusted...