AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-75053

JetBrains IntelliJ IDEA: server-side request forgery

JetBrains

CVE-2026-75053 · Published Aug 17, 2026 · updated Sep 11, 2026

Medium5.4
Fix: upgrade to 2026.2.1 or later
JetBrains advisory

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint

Affected versions

PackageAffectedFixed in
IntelliJ IDEA
Product
< 2026.2.12026.2.1
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-918

More JetBrains advisories

All JetBrains
Medium 4.4Aug 17JetBrains PyCharm: code executionCVE-2026-75059fixed in 2026.2.1High 8.4Aug 17JetBrains PyCharm: remote code executionCVE-2026-75060fixed in 2026.2.1High 7.1Aug 17JetBrains YouTrack: denial of serviceCVE-2026-75050fixed in 2026.1.13901 +1High 8.1Aug 17JetBrains YouTrack: missing authorizationCVE-2026-75051fixed in 2026.2.17917Low 3.6Aug 17JetBrains IntelliJ IDEA: command injectionCVE-2026-75052fixed in 2026.2.1Medium 6.3Aug 17JetBrains IntelliJ IDEA: server-side request forgeryCVE-2026-75054fixed in 2026.2.1