AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-64810

JetBrains IntelliJ IDEA: cross-site scripting

JetBrains

CVE-2026-64810 · Published Jul 23, 2026 · updated Jul 28, 2026

Medium4.3
Fix: upgrade to 2026.2 or later
JetBrains advisory

In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking

Affected versions

PackageAffectedFixed in
IntelliJ IDEA
Product
< 2026.22026.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-79

More JetBrains advisories

All JetBrains
High 8.8Jul 23JetBrains TeamCity: code injectionCVE-2026-65906fixed in 2026.1.2 +1Critical 9.1Jul 23JetBrains TeamCity: code executionCVE-2026-65907fixed in 2026.1.2 +1High 8.6Jul 23JetBrains PyCharm: code executionCVE-2026-65908fixed in 2026.1.4 +1High 8.6Jul 23JetBrains IntelliJ IDEA: missing authorizationCVE-2026-64814fixed in 2026.2High 8.1Jul 23JetBrains IntelliJ IDEA: code injectionCVE-2026-64815fixed in 2026.2High 8.4Jul 23JetBrains WebStorm: code executionCVE-2026-64806fixed in 2026.2