CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MOYENNE5.5 |
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE |
| 17/08/2026 |
| CVE-2026-75054 | MOYENNE6.3 | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects | 17/08/2026 |
| CVE-2026-75053 | MOYENNE5.4 | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint | 17/08/2026 |
| CVE-2026-75052 | MOYENNE4.4 | In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects | 17/08/2026 |
| CVE-2026-64815 | CRITIQUE9.8 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files | 23/07/2026 |
| CVE-2026-64814 | ÉLEVÉE8.6 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64813 | CRITIQUE10.0 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64812 | CRITIQUE10.0 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64811 | ÉLEVÉE7.8 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration | 23/07/2026 |
| CVE-2026-64810 | MOYENNE6.1 | In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking | 23/07/2026 |
| CVE-2026-59792 | CRITIQUE9.8 | In JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project workspace ID handling was possible | 10/07/2026 |
| CVE-2026-49383 | FAIBLE3.3 | In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible | 29/05/2026 |
| CVE-2026-49382 | ÉLEVÉE7.8 | In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin | 29/05/2026 |
| CVE-2026-49367 | ÉLEVÉE8.8 | In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account | 29/05/2026 |
| CVE-2026-49366 | ÉLEVÉE7.8 | In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion | 29/05/2026 |
| CVE-2026-41882 | ÉLEVÉE7.5 | In JetBrains IntelliJ IDEA before 2024.3.7.1,
2025.1.7.1,
2025.2.6.2,
2025.3.4.1,
2026.1.1 reading arbitrary local files was possible via built-in web server | 30/04/2026 |