CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 中危5.5 |
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE |
| 17/08/2026 |
| CVE-2026-75054 | 中危6.3 | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects | 17/08/2026 |
| CVE-2026-75053 | 中危5.4 | In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint | 17/08/2026 |
| CVE-2026-75052 | 中危4.4 | In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects | 17/08/2026 |
| CVE-2026-64815 | 严重9.8 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files | 23/07/2026 |
| CVE-2026-64814 | 高危8.6 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64813 | 严重10.0 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64812 | 严重10.0 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session | 23/07/2026 |
| CVE-2026-64811 | 高危7.8 | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration | 23/07/2026 |
| CVE-2026-64810 | 中危6.1 | In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking | 23/07/2026 |
| CVE-2026-59792 | 严重9.8 | In JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project workspace ID handling was possible | 10/07/2026 |
| CVE-2026-49383 | 低危3.3 | In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible | 29/05/2026 |
| CVE-2026-49382 | 高危7.8 | In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin | 29/05/2026 |
| CVE-2026-49367 | 高危8.8 | In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account | 29/05/2026 |
| CVE-2026-49366 | 高危7.8 | In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion | 29/05/2026 |
| CVE-2026-41882 | 高危7.5 | In JetBrains IntelliJ IDEA before 2024.3.7.1,
2025.1.7.1,
2025.2.6.2,
2025.3.4.1,
2026.1.1 reading arbitrary local files was possible via built-in web server | 30/04/2026 |