#jetbrains
12 articles
JetBrains Hub, CLion and Datalore: 4 Critical Vulnerabilities (CVE-2026-123294 and Others)
Four critical vulnerabilities from one JetBrains bulletin: privilege escalation in Hub during email verification, and code execution in CLion Safe Mode and in Datalore notebooks...
CVE-2026-108474: SQL Injection in JetBrains Exposed (Kotlin)
In the JetBrains Exposed library (a SQL framework for Kotlin) before 1.5.1, SQL injection was possible via unescaped string arguments of several SQL functions...
CVE-2026-75045: Unauthenticated Database Backup Download in YouTrack
In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature...
CVE-2026-64812: unauthorized input injection in Remote Development in JetBrains IntelliJ IDEA (CVSS 10.0)
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session...
CVE-2026-64813: unauthorized settings modification in Remote Development in JetBrains IntelliJ IDEA (CVSS 10.0)
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session...
CVE-2026-65907: In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...
CVE-2026-62422: authentication bypass in JetBrains YouTrack (CVSS 10.0)
In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access w...
CVE-2026-59792: Path Traversal RCE in JetBrains IntelliJ IDEA
In JetBrains IntelliJ IDEA before 2026.1.4 and 2026.2, code execution via path traversal in project workspace ID handling was possible...
CVE-2026-50242: Auth Bypass via Direct DB Access in JetBrains Hub
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was po...
CVE-2026-56141: Account Takeover via Predictable Restore Codes in Hub
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible...
CVE-2026-56142: Privilege Escalation in JetBrains Hub
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible...
CVE-2024-27199: 2024 Vulnerability Now Actively Exploited (JetBrains)
JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed....