Vulnerabilidades de Jetbrains
CVEs publicadas que afetam produtos de Jetbrains: 189 registro(s), com severidade, exploração e correções.
Youtrack 83Teamcity 44Intellij Idea 26Hub 10Pycharm 5Goland 5Webstorm 4Rider 2Phpstorm 2Resharper 2Datalore 2Dottrace 1Kotlin 1Exposed 1ReSharper, Rider and dotTrace 1Junie CLI 1Junie 1Ktor 1
CVE-2026-64813
Crítica · 10.0
CWE-602 23/07/2026
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible…
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
CVE-2026-64812
Crítica · 10.0
CWE-306 23/07/2026
Missing Authentication for Critical Function em Jetbrains Intellij Idea
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session
CVE-2026-64811
Alta · 7.8
CWE-829 23/07/2026
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before…
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration
CVE-2026-64810
Média · 6.1
CWE-79 23/07/2026
Cross-site Scripting (XSS) em Jetbrains Intellij Idea
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking
CVE-2026-64809
Alta · 8.4
CWE-829 23/07/2026
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before…
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter
CVE-2026-64808
Alta · 8.4
CWE-829 23/07/2026
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before…
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling
CVE-2026-64807
Alta · 7.8
CWE-829 23/07/2026
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a…
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration
CVE-2026-64806
Alta · 8.4
CWE-829 23/07/2026
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before…
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter
CVE-2026-64805
Alta · 8.4
CWE-829 23/07/2026
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before…
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling
CVE-2026-64804
Alta · 8.4
CWE-829 23/07/2026
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before…
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling
CVE-2026-64803
Alta · 7.8
CWE-94 23/07/2026
Code Injection em Jetbrains Goland
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK
CVE-2026-64802
Alta · 7.8
CWE-94 23/07/2026
Code Injection em Jetbrains Goland
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration
CVE-2026-64800
Média · 5.7
CWE-532 23/07/2026
Insertion of Sensitive Information into Log File em Jetbrains Goland
In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default
CVE-2026-62422
Crítica · 9.8
CWE-306 14/07/2026
Missing Authentication for Critical Function em Jetbrains Youtrack
In JetBrains YouTrack before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,
2024.2.148429 authentication bypass via direct database access leading to administrative access was possible
CVE-2026-61492
Média · 6.1
CWE-79 10/07/2026
Cross-site Scripting (XSS) em Jetbrains Youtrack
In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possible
CVE-2026-59796
Alta · 8.1
CWE-862 10/07/2026
Missing Authorization em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks
CVE-2026-59795
Média · 6.1
CWE-79 10/07/2026
Cross-site Scripting (XSS) em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
CVE-2026-59794
Média · 5.4
CWE-79 10/07/2026
Cross-site Scripting (XSS) em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data
CVE-2026-59793
Alta · 8.8
CWE-73 10/07/2026
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the…
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration
CVE-2026-59792
Crítica · 9.8
CWE-23 10/07/2026
Relative Path Traversal em Jetbrains Intellij Idea
In JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project workspace ID handling was possible
CVE-2026-59791
Baixa · 3.5
CWE-1021 10/07/2026
Clickjacking em Jetbrains Youtrack
In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible
CVE-2026-57926
Crítica · 9.8
CWE-1321 26/06/2026
Prototype Pollution na ponte websandbox do JetBrains YouTrack
Na JetBrains YouTrack anterior à versão 2026.2.16593, a ponte websandbox era vulnerável a um ataque de prototype pollution
CVE-2026-57925
Média · 5.3
CWE-862 26/06/2026
Missing Authorization em Jetbrains Youtrack
In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags
CVE-2026-57924
Média · 5.3
CWE-276 26/06/2026
Incorrect Default Permissions em Jetbrains Youtrack
In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details
CVE-2026-57923
Alta · 7.5
CWE-862 26/06/2026
Missing Authorization em Jetbrains Youtrack
In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings