JetBrains security advisories

74 advisories · 39 critical or high in 12 months · latest Sep 7

60 of 74 advisories

Date	Advisory	Severity	Fixed in
Sep 7	JetBrains IntelliJ IDEA: information disclosure Low3.3Sep 7 CVE-2026-865052026.2.2	Low3.3	2026.2.2
Sep 7	JetBrains GoLand: missing authentication Medium5.9Sep 7 CVE-2026-865062026.2.2.1	Medium5.9	2026.2.2.1
Sep 7	JetBrains YouTrack: information disclosure Medium6.8Sep 7 CVE-2026-864972026.2.18769	Medium6.8	2026.2.18769
Sep 7	JetBrains YouTrack: improper authorization High7.7Sep 7 CVE-2026-864982025.3.160480+1 more	High7.7	2025.3.160480+1 more
Sep 7	JetBrains YouTrack: missing authorization Medium4.3Sep 7 CVE-2026-864992026.1.14047	Medium4.3	2026.1.14047
Sep 7	In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user... Medium5.5Sep 7 CVE-2026-865002026.1.14047	Medium5.5	2026.1.14047
Sep 7	JetBrains IntelliJ IDEA: secrets in logs Low2.8Sep 7 CVE-2026-865012026.2.2	Low2.8	2026.2.2
Sep 7	JetBrains IntelliJ IDEA: remote code execution High8.4Sep 7 CVE-2026-865022026.2.2	High8.4	2026.2.2
Sep 7	JetBrains IntelliJ IDEA: server-side request forgery Low3.3Sep 7 CVE-2026-865032026.2.2	Low3.3	2026.2.2
Sep 7	JetBrains IntelliJ IDEA: code execution High7.8Sep 7 CVE-2026-865042026.2.2	High7.8	2026.2.2
Sep 7	JetBrains YouTrack: insecure direct object reference Medium6.5Sep 7 CVE-2026-864882026.2.18634	Medium6.5	2026.2.18634
Sep 7	JetBrains YouTrack: insecure direct object reference Medium6.5Sep 7 CVE-2026-864892026.2.18634	Medium6.5	2026.2.18634
Sep 7	JetBrains YouTrack: insecure permissions Medium6.5Sep 7 CVE-2026-864902026.2.18634	Medium6.5	2026.2.18634
Sep 7	JetBrains YouTrack: cross-site scripting Low3.5Sep 7 CVE-2026-864912026.2.18634	Low3.5	2026.2.18634
Sep 7	In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed... High8.5Sep 7 CVE-2026-864922026.2.18634	High8.5	2026.2.18634
Sep 7	JetBrains YouTrack: insecure permissions Medium6.5Sep 7 CVE-2026-864932026.2.18634	Medium6.5	2026.2.18634
Sep 7	JetBrains YouTrack: missing authorization High7.7Sep 7 CVE-2026-864942026.2.18634	High7.7	2026.2.18634
Sep 7	JetBrains YouTrack: missing authorization Medium6.5Sep 7 CVE-2026-864952026.2.18687	Medium6.5	2026.2.18687
Sep 7	JetBrains YouTrack: improper access control Medium4.3Sep 7 CVE-2026-864962026.2.18769	Medium4.3	2026.2.18769
Sep 7	JetBrains YouTrack: missing authorization High8.1Sep 7 CVE-2026-864792026.2.18788+2 more	High8.1	2026.2.18788+2 more
Sep 7	JetBrains Hub: missing authentication Critical9.8Sep 7 CVE-2026-864802026.2.52442	Critical9.8	2026.2.52442
Sep 7	JetBrains YouTrack: insecure direct object reference Medium4.3Sep 7 CVE-2026-864812026.2.18634	Medium4.3	2026.2.18634
Sep 7	JetBrains YouTrack: privilege escalation High8.8Sep 7 CVE-2026-864822026.2.18634	High8.8	2026.2.18634
Sep 7	JetBrains YouTrack: cross-site scripting Medium5.4Sep 7 CVE-2026-864832026.2.18634	Medium5.4	2026.2.18634
Sep 7	JetBrains YouTrack: template injection Medium4.6Sep 7 CVE-2026-864842026.2.18634	Medium4.6	2026.2.18634
Sep 7	JetBrains YouTrack: spoofing Low3.3Sep 7 CVE-2026-864852026.2.18634	Low3.3	2026.2.18634
Sep 7	JetBrains YouTrack: missing authentication Low3.7Sep 7 CVE-2026-864862026.2.18634	Low3.7	2026.2.18634
Sep 7	JetBrains YouTrack: improper authorization Low3.1Sep 7 CVE-2026-864872026.2.18634	Low3.1	2026.2.18634
Sep 7	JetBrains YouTrack: improper authentication Critical9.8Sep 7 CVE-2026-864782025.3.161254+1 more	Critical9.8	2025.3.161254+1 more
Aug 17	JetBrains PyCharm: code execution Medium4.4Aug 17 CVE-2026-750592026.2.1	Medium4.4	2026.2.1
Aug 17	JetBrains PyCharm: remote code execution High8.4Aug 17 CVE-2026-750602026.2.1	High8.4	2026.2.1
Aug 17	JetBrains YouTrack: denial of service High7.1Aug 17 CVE-2026-750502026.1.13901+1 more	High7.1	2026.1.13901+1 more
Aug 17	JetBrains YouTrack: missing authorization High8.1Aug 17 CVE-2026-750512026.2.17917	High8.1	2026.2.17917
Aug 17	JetBrains IntelliJ IDEA: command injection Low3.6Aug 17 CVE-2026-750522026.2.1	Low3.6	2026.2.1
Aug 17	JetBrains IntelliJ IDEA: server-side request forgery Medium5.4Aug 17 CVE-2026-750532026.2.1	Medium5.4	2026.2.1
Aug 17	JetBrains IntelliJ IDEA: server-side request forgery Medium6.3Aug 17 CVE-2026-750542026.2.1	Medium6.3	2026.2.1
Aug 17	JetBrains IntelliJ IDEA: XML external entity Medium5.5Aug 17 CVE-2026-750552026.2.1	Medium5.5	2026.2.1
Aug 17	JetBrains IntelliJ IDEA: command injection High7.8Aug 17 CVE-2026-750562026.2.1	High7.8	2026.2.1
Aug 17	JetBrains IntelliJ IDEA: secrets in logs Medium6.2Aug 17 CVE-2026-750572026.1.5	Medium6.2	2026.1.5
Aug 17	JetBrains IntelliJ IDEA: XML external entity Medium5.5Aug 17 CVE-2026-750582026.2.1	Medium5.5	2026.2.1
Aug 17	JetBrains YouTrack: missing authorization High8.1Aug 17 CVE-2026-750442025.3.156085+2 more	High8.1	2025.3.156085+2 more
Aug 17	JetBrains YouTrack: authentication bypass Critical9.1Aug 17 CVE-2026-750452025.3.156085+2 more	Critical9.1	2025.3.156085+2 more
Aug 17	JetBrains YouTrack: missing authorization Medium4.3Aug 17 CVE-2026-750462026.2.18112	Medium4.3	2026.2.18112
Aug 17	JetBrains YouTrack: denial of service Medium6.5Aug 17 CVE-2026-750472026.2.18177	Medium6.5	2026.2.18177
Aug 17	JetBrains YouTrack: cross-site scripting High8.2Aug 17 CVE-2026-750482026.2.18068	High8.2	2026.2.18068
Aug 17	JetBrains YouTrack: missing authorization Medium6.5Aug 17 CVE-2026-750492026.1.13903+1 more	Medium6.5	2026.1.13903+1 more
Aug 17	JetBrains Ktor: denial of service Medium5.9Aug 17 CVE-2026-687623.4.1	Medium5.9	3.4.1
Jul 27	JetBrains TeamCity: remote code execution Critical9.8Jul 27 CVE-2026-630772026.1.3+1 more	Critical9.8	2026.1.3+1 more
Jul 23	JetBrains TeamCity: code injection High8.8Jul 23 CVE-2026-659062026.1.2+1 more	High8.8	2026.1.2+1 more
Jul 23	JetBrains TeamCity: code execution Critical9.1Jul 23 CVE-2026-659072026.1.2+1 more	Critical9.1	2026.1.2+1 more
Jul 23	JetBrains PyCharm: code execution High8.6Jul 23 CVE-2026-659082026.1.4+1 more	High8.6	2026.1.4+1 more
Jul 23	JetBrains IntelliJ IDEA: missing authorization High8.6Jul 23 CVE-2026-648142026.2	High8.6	2026.2
Jul 23	JetBrains IntelliJ IDEA: code injection High8.1Jul 23 CVE-2026-648152026.2	High8.1	2026.2
Jul 23	JetBrains WebStorm: code execution High8.4Jul 23 CVE-2026-648062026.2	High8.4	2026.2
Jul 23	JetBrains WebStorm: code execution High7.8Jul 23 CVE-2026-648072026.2	High7.8	2026.2
Jul 23	JetBrains PhpStorm: code execution High8.4Jul 23 CVE-2026-648082026.2	High8.4	2026.2
Jul 23	JetBrains PhpStorm: code execution High8.4Jul 23 CVE-2026-648092026.2	High8.4	2026.2
Jul 23	JetBrains IntelliJ IDEA: cross-site scripting Medium4.3Jul 23 CVE-2026-648102026.2	Medium4.3	2026.2
Jul 23	JetBrains IntelliJ IDEA: code execution High7.8Jul 23 CVE-2026-648112026.2	High7.8	2026.2
Jul 23	JetBrains IntelliJ IDEA: missing authentication Critical10.0Jul 23 CVE-2026-648122026.2	Critical10.0	2026.2

About JetBrains

Security advisories JetBrains publishes for its own products.

www.jetbrains.com/privacy-security/issues-fixed JetBrains

JetBrains elsewhere on fru.dev: Releases

Critical advisories by email