CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통5.5 |
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE |
| 17/08/2026 |
| CVE-2026-75054 | 보통6.3 | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects | 17/08/2026 |
| CVE-2026-75053 | 보통5.4 | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint | 17/08/2026 |
| CVE-2026-75052 | 보통4.4 | In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects | 17/08/2026 |
| CVE-2026-64815 | 심각9.8 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files | 23/07/2026 |
| CVE-2026-64814 | 높음8.6 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64813 | 심각10.0 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64812 | 심각10.0 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64811 | 높음7.8 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration | 23/07/2026 |
| CVE-2026-64810 | 보통6.1 | In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking | 23/07/2026 |
| CVE-2026-59792 | 심각9.8 | In JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project workspace ID handling was possible | 10/07/2026 |
| CVE-2026-49383 | 낮음3.3 | In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible | 29/05/2026 |
| CVE-2026-49382 | 높음7.8 | In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin | 29/05/2026 |
| CVE-2026-49367 | 높음8.8 | In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account | 29/05/2026 |
| CVE-2026-49366 | 높음7.8 | In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion | 29/05/2026 |
| CVE-2026-41882 | 높음7.5 | In JetBrains IntelliJ IDEA before 2024.3.7.1,
2025.1.7.1,
2025.2.6.2,
2025.3.4.1,
2026.1.1 reading arbitrary local files was possible via built-in web server | 30/04/2026 |