Skip to content
OpenAdvisories

Vendor

JetBrains

545 known vulnerabilities.

Products

TeamCity 191 YouTrack 141 IntelliJ IDEA 94 Hub 25 Datalore 19 Ktor 14 WebStorm 10 PyCharm 10 Toolbox App 10 Rider 9 GoLand 9 PhpStorm 8 CLion 7 Junie CLI 4 RubyMine 4 DataGrip 3 RustRover 3 Junie 3 ReSharper 2 DataSpell 2 Junie GitHub Action 2 dotTrace 1 ETW Host Service 1 ReSharper, Rider and dotTrace 1 Kotlin 1 IDE Services 1 Exposed 1 Runtime 1 JetBrains Gateway 1 Aqua 1 MPS 1 TeamCity < 2023.05.4 0 IntelliJ IDEA < 2023.1 0 TeamCity < 2023.05.3 0 TeamCity < 2023.05 0 IntelliJ IDEA < 2022.2.4 0 IntelliJ IDEA < 2022.3 0 TeamCity < 2023.11.1 0 PhpStorm < 2023.1 0 IntelliJ IDEA < 2022.3.1 0
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-86478 Public exploit

    In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent…

    JetBrains YouTrack
  • Critical 9.1
    CVE-2026-75045 Public exploit

    In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download datab…

    JetBrains YouTrack
  • Critical 9.8
    CVE-2026-63077 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polli…

    JetBrains TeamCity
    KEV Aug 5, 2026
  • High 8.1
    CVE-2026-59795 Public exploit

    In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

    JetBrains TeamCity
  • Medium 4.3
    CVE-2024-56348 Public exploit

    In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents

    JetBrains TeamCity
  • Critical 9.3
    CVE-2024-37051 Public exploit

    GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: Intelli…

    JetBrains IntelliJ IDEA PyCharm WebStorm
  • Critical 9.8
    CVE-2024-27198 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

    JetBrains TeamCity
    KEV Mar 7, 2024
  • High 8.6
    CVE-2023-45612 Public exploit

    In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE

    JetBrains Ktor
  • Critical 9.8
    CVE-2023-42793 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

    JetBrains TeamCity
    KEV Oct 4, 2023
  • Medium 4.6
    CVE-2022-48429 Public exploit

    In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible

    JetBrains Hub