Jetbrains: >> Intellij Idea >> 11.1.4 Security Vulnerabilities
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects
CVSS Score
3.6
EPSS Score
0.001
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint
CVSS Score
5.4
EPSS Score
0.002
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects
CVSS Score
6.3
EPSS Score
0.001
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE
CVSS Score
5.5
EPSS Score
0.001
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
CVSS Score
7.8
EPSS Score
0.002
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
CVSS Score
6.2
EPSS Score
0.001
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers
CVSS Score
5.5
EPSS Score
0.001
Published
2026-08-17
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
CVSS Score
8.6
EPSS Score
0.003
Published
2026-07-23
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files
CVSS Score
8.1
EPSS Score
0.003
Published
2026-07-23
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking
CVSS Score
4.3
EPSS Score
0.001
Published
2026-07-23
Page 1