Summary
Ein Angreifer kann mehrere Schwachstellen in JetBrains IntelliJ IDEA ausnutzen, um beliebigen Programmcode auszuführen, SSRF-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.
Product
IntelliJ IDEA ist eine Java Entwicklungsumgebung (IDE).
Vulnerabilities 7
-
High 7.8
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
-
Medium 6.3
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects
-
Medium 6.2
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
-
Medium 5.5
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE
-
Medium 5.5
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers
-
Medium 5.4
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint
-
Low 3.6
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trust…
Revision history
-
#1
Initiale Fassung
References
-
JetBrains Issues Fixed vom 2026-08-17
https://www.jetbrains.com/privacy-security/issues-fixed/
-
National Vulnerability Database CVE-2026-75052 vom 2026-08-17
https://nvd.nist.gov/vuln/detail/CVE-2026-75052
-
National Vulnerability Database CVE-2026-75053 vom 2026-08-17
https://nvd.nist.gov/vuln/detail/CVE-2026-75053
-
National Vulnerability Database CVE-2026-75054 vom 2026-08-17
https://nvd.nist.gov/vuln/detail/CVE-2026-75054
-
National Vulnerability Database CVE-2026-75055 vom 2026-08-17
https://nvd.nist.gov/vuln/detail/CVE-2026-75055
-
National Vulnerability Database CVE-2026-75056 vom 2026-08-17
https://nvd.nist.gov/vuln/detail/CVE-2026-75056
-
National Vulnerability Database CVE-2026-75057 vom 2026-08-17
https://nvd.nist.gov/vuln/detail/CVE-2026-75057
-
National Vulnerability Database CVE-2026-75058 vom 2026-08-17
https://nvd.nist.gov/vuln/detail/CVE-2026-75058