Skip to content
OpenAdvisories

Vendor

JetBrains

545 known vulnerabilities.

Products

TeamCity 191 YouTrack 141 IntelliJ IDEA 94 Hub 25 Datalore 19 Ktor 14 WebStorm 10 PyCharm 10 Toolbox App 10 Rider 9 GoLand 9 PhpStorm 8 CLion 7 Junie CLI 4 RubyMine 4 DataGrip 3 RustRover 3 Junie 3 ReSharper 2 DataSpell 2 Junie GitHub Action 2 dotTrace 1 ETW Host Service 1 ReSharper, Rider and dotTrace 1 Kotlin 1 IDE Services 1 Exposed 1 Runtime 1 JetBrains Gateway 1 Aqua 1 MPS 1 TeamCity < 2023.05.4 0 IntelliJ IDEA < 2023.1 0 TeamCity < 2023.05.3 0 TeamCity < 2023.05 0 IntelliJ IDEA < 2022.2.4 0 IntelliJ IDEA < 2022.3 0 TeamCity < 2023.11.1 0 PhpStorm < 2023.1 0 IntelliJ IDEA < 2022.3.1 0
All Critical High Medium Low Exploited only Public exploit

24 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-123832

    In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database

    JetBrains CLion
  • Critical 9.6
    CVE-2026-123831

    In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings

    JetBrains CLion
  • Critical 9.6
    CVE-2026-123294

    In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during …

    JetBrains Hub
  • Critical 9.0
    CVE-2026-123279

    In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators

    JetBrains Datalore
  • Critical 9.0
    CVE-2026-118697

    In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider…

    JetBrains IntelliJ IDEA WebStorm Toolbox App
  • Critical 9.8
    CVE-2026-108474

    In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

    JetBrains Exposed
  • Critical 9.8
    CVE-2026-86480

    In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser pr…

    JetBrains Hub
  • Critical 9.8
    CVE-2026-86478 Public exploit

    In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent…

    JetBrains YouTrack
  • Critical 9.1
    CVE-2026-75045 Public exploit

    In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download datab…

    JetBrains YouTrack
  • Critical 9.8
    CVE-2026-63077 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polli…

    JetBrains TeamCity
    KEV Aug 5, 2026
  • Critical 9.1
    CVE-2026-65907

    In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

    JetBrains TeamCity
  • Critical 10.0
    CVE-2026-64813

    In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session

    JetBrains IntelliJ IDEA
  • Critical 10.0
    CVE-2026-64812

    In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session

    JetBrains IntelliJ IDEA
  • Critical 10.0
    CVE-2026-62422

    In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 au…

    JetBrains YouTrack
  • Critical 9.6
    CVE-2026-59792

    In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling w…

    JetBrains IntelliJ IDEA
  • Critical 10.0
    CVE-2026-50242

    In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authent…

    JetBrains Hub
  • Critical 9.8
    CVE-2026-56141

    In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account…

    JetBrains Hub
  • Critical 9.6
    CVE-2026-56142

    In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privile…

    JetBrains Hub
  • Critical 9.1
    CVE-2026-25848

    In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible

    JetBrains Hub
  • Critical 9.3
    CVE-2024-37051 Public exploit

    GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: Intelli…

    JetBrains IntelliJ IDEA PyCharm WebStorm
  • Critical 9.8
    CVE-2024-27198 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

    JetBrains TeamCity
    KEV Mar 7, 2024
  • Critical 9.8
    CVE-2024-23917 Scanner template EPSS 54%

    In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible

    JetBrains TeamCity
  • Critical 9.8
    CVE-2023-42793 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

    JetBrains TeamCity
    KEV Oct 4, 2023
  • Critical 9.1
    CVE-2023-34218

    In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible

    JetBrains TeamCity