Known Vulnerabilities for products from JetBrains
Listed below are 20 of the newest known vulnerabilities associated with the vendor "JetBrains".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123858 json | Not Provided | 2026-11-06 | 2026-11-06 | |
| CVE-2026-123857 json | Not Provided | 2026-11-06 | 2026-11-06 | |
| CVE-2026-123856 json | Not Provided | 2026-11-06 | 2026-11-06 | |
| CVE-2026-123855 json | Not Provided | 2026-11-06 | 2026-11-07 | |
| CVE-2026-123854 json | Not Provided | 2026-11-06 | 2026-11-08 | |
| CVE-2026-123853 json | Not Provided | 2026-11-06 | 2026-11-07 | |
| CVE-2026-123852 json | Not Provided | 2026-11-06 | 2026-11-06 | |
| CVE-2026-123851 json | Not Provided | 2026-11-06 | 2026-11-06 | |
| CVE-2026-123850 json | Not Provided | 2026-11-06 | 2026-11-06 | |
| CVE-2026-123849 json | Not Provided | 2026-11-06 | 2026-11-07 | |
| CVE-2026-111096 json | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-111095 json | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-111094 json | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-106219 json | In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the serv... | Not Provided | 2026-10-06 | 2026-10-08 |
| CVE-2026-106218 json | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | Not Provided | 2026-10-06 | 2026-10-08 |
| CVE-2026-103497 json | In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103496 json | In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103495 json | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103494 json | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes | Not Provided | 2026-10-01 | 2026-10-02 |
| CVE-2026-103493 json | In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible | Not Provided | 2026-10-01 | 2026-10-01 |
Known software with vulnerabilities from JetBrains
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Jetbrains | Dotpeek | 10.0 |
| Application | Jetbrains | Goland | 2017.3 |
| Application | Jetbrains | Hub | 1.0.648 |
| Application | Jetbrains | Ideavim | - |
| Application | Jetbrains | Idetalk | 193.4099.10 |
| Application | Jetbrains | Intellij Idea | - |
| Application | Jetbrains | Kotlin | 0.9 |
| Application | Jetbrains | Ktor | 0.0.1 |
| Application | Jetbrains | Mps | - |
| Application | Jetbrains | Omea Reader | 2.2 |
| Application | Jetbrains | Pycharm | - |
| Application | Jetbrains | Resharper | 10.0 |
| Application | Jetbrains | Resharper Ultimate | 2016.1 |
| Application | Jetbrains | Rider | - |
| Application | Jetbrains | Scala | 2019.2.1 |
| Application | Jetbrains | Space | - |
| Application | Jetbrains | Teamcity | 10.0 |
| Application | Jetbrains | Toolbox | - |
| Application | Jetbrains | Upsource | 1.0 |
| Application | Jetbrains | Vim | - |