CVE-2026-49367

概要

参考情報

• jetbrains.com/privacy-security/issues-fixed · Vendor Advisory

intellij idea のその他の脆弱性

• CVE-2026-100256高 7.8In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects
• CVE-2026-75058中 5.5In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers
• CVE-2026-75057中 6.2In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
• CVE-2026-75056高 7.8In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
• CVE-2026-75055中 5.5In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE