Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-63077 KEV |
|
[KEV] Unsafe Deserialization in Jetbrains teamcity (CVE-2026-63077)
vulnerability in Jetbrains teamcity (CVE-2026-63077). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-65908 |
|
Vulnerability in jetbrains (CVE-2026-65908)
vulnerability in jetbrains (CVE-2026-65908). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65906 |
|
Code Injection in jetbrains (CVE-2026-65906)
code injection in jetbrains (CVE-2026-65906). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64813 |
|
Vulnerability in jetbrains (CVE-2026-64813)
vulnerability in jetbrains (CVE-2026-64813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64809 |
|
Vulnerability in jetbrains (CVE-2026-64809)
vulnerability in jetbrains (CVE-2026-64809). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64811 |
|
Vulnerability in jetbrains (CVE-2026-64811)
vulnerability in jetbrains (CVE-2026-64811). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64802 |
|
Code Injection in jetbrains (CVE-2026-64802)
code injection in jetbrains (CVE-2026-64802). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64800 |
|
In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default
In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default
|
| CVE-2026-64807 |
|
Vulnerability in jetbrains (CVE-2026-64807)
vulnerability in jetbrains (CVE-2026-64807). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64814 |
|
Vulnerability in jetbrains (CVE-2026-64814)
vulnerability in jetbrains (CVE-2026-64814). Confidential information can be exposed externally.
|
| CVE-2026-64812 |
|
Vulnerability in jetbrains (CVE-2026-64812)
vulnerability in jetbrains (CVE-2026-64812). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64805 |
|
Vulnerability in jetbrains (CVE-2026-64805)
vulnerability in jetbrains (CVE-2026-64805). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64803 |
|
Code Injection in jetbrains (CVE-2026-64803)
code injection in jetbrains (CVE-2026-64803). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64815 |
|
Code Injection in jetbrains (CVE-2026-64815)
code injection in jetbrains (CVE-2026-64815). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64808 |
|
Vulnerability in jetbrains (CVE-2026-64808)
vulnerability in jetbrains (CVE-2026-64808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64810 |
|
Cross-Site Scripting (XSS) in jetbrains (CVE-2026-64810)
cross-site scripting in jetbrains (CVE-2026-64810). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64804 |
|
Vulnerability in jetbrains (CVE-2026-64804)
vulnerability in jetbrains (CVE-2026-64804). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64806 |
|
Vulnerability in jetbrains (CVE-2026-64806)
vulnerability in jetbrains (CVE-2026-64806). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62422 |
|
Vulnerability in jetbrains (CVE-2026-62422)
vulnerability in jetbrains (CVE-2026-62422). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61492 |
|
Cross-Site Scripting (XSS) in jetbrains (CVE-2026-61492)
cross-site scripting in jetbrains (CVE-2026-61492). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59794 |
|
Cross-Site Scripting (XSS) in jetbrains (CVE-2026-59794)
cross-site scripting in jetbrains (CVE-2026-59794). Confidential information can be exposed externally.
|
| CVE-2026-59791 |
|
In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible
In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible
|
| CVE-2026-59795 |
|
Cross-Site Scripting (XSS) in jetbrains (CVE-2026-59795)
cross-site scripting in jetbrains (CVE-2026-59795). Confidential information can be exposed externally.
|
| CVE-2026-59796 |
|
Vulnerability in jetbrains (CVE-2026-59796)
vulnerability in jetbrains (CVE-2026-59796). Confidential information can be exposed externally.
|
| CVE-2026-59792 |
|
Vulnerability in path-traversal (CVE-2026-59792)
vulnerability in path-traversal (CVE-2026-59792). Confidential information can be exposed externally.
|
| CVE-2026-59793 |
|
Vulnerability in jetbrains (CVE-2026-59793)
vulnerability in jetbrains (CVE-2026-59793). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57926 |
|
Vulnerability in jetbrains (CVE-2026-57926)
vulnerability in jetbrains (CVE-2026-57926). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57924 |
|
Vulnerability in jetbrains (CVE-2026-57924)
vulnerability in jetbrains (CVE-2026-57924). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53914 |
|
Unsafe Deserialization in org.jetbrains.kotlin:kotlin-gradle-plugin (CVE-2026-53914)
vulnerability in org.jetbrains.kotlin:kotlin-gradle-plugin (CVE-2026-53914). Confidential information can be exposed externally. Mitigation: upgrade to `2.4.20-Beta1` or later.
|
| CVE-2026-57923 |
|
Vulnerability in jetbrains (CVE-2026-57923)
vulnerability in jetbrains (CVE-2026-57923). Data can be tampered with by attackers.
|
| CVE-2026-57925 |
|
Vulnerability in jetbrains (CVE-2026-57925)
vulnerability in jetbrains (CVE-2026-57925). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57922 |
|
In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible
In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible
|
| CVE-2026-57921 |
|
Vulnerability in jetbrains (CVE-2026-57921)
vulnerability in jetbrains (CVE-2026-57921). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56142 |
|
Vulnerability in privilege-escalation (CVE-2026-56142)
vulnerability in privilege-escalation (CVE-2026-56142). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56141 |
|
Vulnerability in jetbrains (CVE-2026-56141)
vulnerability in jetbrains (CVE-2026-56141). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53915 |
|
Vulnerability in jetbrains (CVE-2026-53915)
vulnerability in jetbrains (CVE-2026-53915). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50242 |
|
Vulnerability in jetbrains (CVE-2026-50242)
vulnerability in jetbrains (CVE-2026-50242). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49385 |
|
Vulnerability in jetbrains (CVE-2026-49385)
vulnerability in jetbrains (CVE-2026-49385). Data can be tampered with by attackers.
|
| CVE-2026-49381 |
|
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
|
| CVE-2026-49382 |
|
Vulnerability in jetbrains (CVE-2026-49382)
vulnerability in jetbrains (CVE-2026-49382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49383 |
|
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
|
| CVE-2026-49384 |
|
In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible
In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible
|
| CVE-2026-49386 |
|
Vulnerability in jetbrains (CVE-2026-49386)
vulnerability in jetbrains (CVE-2026-49386). Confidential information can be exposed externally.
|
| CVE-2026-49378 |
|
Vulnerability in jetbrains (CVE-2026-49378)
vulnerability in jetbrains (CVE-2026-49378). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49372 |
|
In JetBrains TeamCity before 2026.1,
2025.11.5 unauthenticated SSRF via build status was possible
In JetBrains TeamCity before 2026.1,
2025.11.5 unauthenticated SSRF via build status was possible
|
| CVE-2026-49373 |
|
Vulnerability in jetbrains (CVE-2026-49373)
vulnerability in jetbrains (CVE-2026-49373). Confidential information can be exposed externally.
|
| CVE-2026-49374 |
|
Vulnerability in jetbrains (CVE-2026-49374)
vulnerability in jetbrains (CVE-2026-49374). Confidential information can be exposed externally.
|
| CVE-2026-49375 |
|
Cross-Site Scripting (XSS) in jetbrains (CVE-2026-49375)
cross-site scripting in jetbrains (CVE-2026-49375). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49376 |
|
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
|
| CVE-2026-49377 |
|
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
|