CVE-2026-75056

Description

References

• jetbrains.com/privacy-security/issues-fixed · Vendor Advisory

More vulnerabilities in intellij idea

• CVE-2026-100256HIGH 7.8In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects
• CVE-2026-75058MEDIUM 5.5In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers
• CVE-2026-75057MEDIUM 6.2In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
• CVE-2026-75055MEDIUM 5.5In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE
• CVE-2026-75054MEDIUM 6.3In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects