AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-64812

JetBrains IntelliJ IDEA: missing authentication

JetBrains

CVE-2026-64812 · Published Jul 23, 2026 · updated Jul 28, 2026

Critical10.0
Fix: upgrade to 2026.2 or later
JetBrains advisory

In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session

Affected versions

PackageAffectedFixed in
IntelliJ IDEA
Product
< 2026.22026.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-306

More JetBrains advisories

All JetBrains
High 8.8Jul 23JetBrains TeamCity: code injectionCVE-2026-65906fixed in 2026.1.2 +1Critical 9.1Jul 23JetBrains TeamCity: code executionCVE-2026-65907fixed in 2026.1.2 +1High 8.6Jul 23JetBrains PyCharm: code executionCVE-2026-65908fixed in 2026.1.4 +1High 8.6Jul 23JetBrains IntelliJ IDEA: missing authorizationCVE-2026-64814fixed in 2026.2High 8.1Jul 23JetBrains IntelliJ IDEA: code injectionCVE-2026-64815fixed in 2026.2High 8.4Jul 23JetBrains WebStorm: code executionCVE-2026-64806fixed in 2026.2