{"schema_version":1,"title":"Jetbrains IntelliJ IDEA vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 23 vulnerabilities in Jetbrains IntelliJ IDEA: 0 in the last 7 days and 19 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-86505, was published on 7 September 2026.","url":"https://junglewise.ai/threats/technologies/intellij-idea","json_url":"https://junglewise.ai/threats/technologies/intellij-idea.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/intellij-idea","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":8,"all_time":23,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":5,"last_90_days":19,"last_365_days":23},"latest":[{"cve":"CVE-2026-86505","cvss":3.3,"epss":0.0015,"slug":"cve-2026-86505-jetbrains-intellij-idea-project-metadata-disclosure-to","title":"JetBrains IntelliJ IDEA project metadata disclosure to marketplace","severity":"low","exploited":false,"published_at":"2026-09-07T17:17:29.02+00:00","url":"https://junglewise.ai/threats/cve-2026-86505-jetbrains-intellij-idea-project-metadata-disclosure-to"},{"cve":"CVE-2026-86504","cvss":7.8,"epss":0.0019,"slug":"cve-2026-86504-jetbrains-intellij-idea-dev-container-code-execution-via-missing","title":"JetBrains IntelliJ IDEA Dev Container code execution via missing trust confirmation","severity":"high","exploited":false,"published_at":"2026-09-07T17:17:28.903+00:00","url":"https://junglewise.ai/threats/cve-2026-86504-jetbrains-intellij-idea-dev-container-code-execution-via-missing"},{"cve":"CVE-2026-86503","cvss":3.3,"epss":0.0015,"slug":"cve-2026-86503-jetbrains-intellij-idea-ssrf-in-kubernetes-spec-source-url","title":"JetBrains IntelliJ IDEA SSRF in Kubernetes spec-source URL fetching","severity":"low","exploited":false,"published_at":"2026-09-07T17:17:28.783+00:00","url":"https://junglewise.ai/threats/cve-2026-86503-jetbrains-intellij-idea-ssrf-in-kubernetes-spec-source-url"},{"cve":"CVE-2026-86502","cvss":8.4,"epss":0.0021,"slug":"cve-2026-86502-jetbrains-intellij-idea-missing-tls-and-authentication-in-ijent","title":"JetBrains IntelliJ IDEA missing TLS and authentication in IJent gRPC server","severity":"high","exploited":false,"published_at":"2026-09-07T17:17:28.67+00:00","url":"https://junglewise.ai/threats/cve-2026-86502-jetbrains-intellij-idea-missing-tls-and-authentication-in-ijent"},{"cve":"CVE-2026-86501","cvss":2.8,"epss":0.0039,"slug":"cve-2026-86501-jetbrains-intellij-idea-information-disclosure-in-terminal","title":"JetBrains IntelliJ IDEA information disclosure in terminal logging","severity":"low","exploited":false,"published_at":"2026-09-07T17:17:28.56+00:00","url":"https://junglewise.ai/threats/cve-2026-86501-jetbrains-intellij-idea-information-disclosure-in-terminal"},{"cve":"CVE-2026-75058","cvss":5.5,"epss":0.0015,"slug":"cve-2026-75058-jetbrains-intellij-idea-xxe-in-eclipse-settings-importer","title":"JetBrains IntelliJ IDEA XXE in Eclipse settings importer","severity":"medium","exploited":false,"published_at":"2026-08-17T16:17:52.977+00:00","url":"https://junglewise.ai/threats/cve-2026-75058-jetbrains-intellij-idea-xxe-in-eclipse-settings-importer"},{"cve":"CVE-2026-75057","cvss":6.2,"epss":0.0017,"slug":"cve-2026-75057-jetbrains-intellij-idea-plaintext-credential-logging","title":"JetBrains IntelliJ IDEA plaintext credential logging","severity":"medium","exploited":false,"published_at":"2026-08-17T16:17:52.88+00:00","url":"https://junglewise.ai/threats/cve-2026-75057-jetbrains-intellij-idea-plaintext-credential-logging"},{"cve":"CVE-2026-75056","cvss":7.8,"epss":0.0019,"slug":"cve-2026-75056-jetbrains-intellij-idea-remote-code-execution-in-markdown-export","title":"JetBrains IntelliJ IDEA remote code execution in Markdown export","severity":"high","exploited":false,"published_at":"2026-08-17T16:17:52.77+00:00","url":"https://junglewise.ai/threats/cve-2026-75056-jetbrains-intellij-idea-remote-code-execution-in-markdown-export"},{"cve":"CVE-2026-75055","cvss":5.5,"epss":0.0015,"slug":"cve-2026-75055-jetbrains-intellij-idea-xxe-in-hadoop-resourcemanager-support","title":"JetBrains IntelliJ IDEA XXE in Hadoop ResourceManager support","severity":"medium","exploited":false,"published_at":"2026-08-17T16:17:52.657+00:00","url":"https://junglewise.ai/threats/cve-2026-75055-jetbrains-intellij-idea-xxe-in-hadoop-resourcemanager-support"},{"cve":"CVE-2026-75054","cvss":6.3,"epss":0.0015,"slug":"cve-2026-75054-jetbrains-intellij-idea-server-side-request-forgery-in-openapi","title":"JetBrains IntelliJ IDEA server-side request forgery in OpenAPI preview","severity":"medium","exploited":false,"published_at":"2026-08-17T16:17:52.543+00:00","url":"https://junglewise.ai/threats/cve-2026-75054-jetbrains-intellij-idea-server-side-request-forgery-in-openapi"},{"cve":"CVE-2026-75053","cvss":5.4,"epss":0.0024,"slug":"cve-2026-75053-jetbrains-intellij-idea-server-side-request-forgery-in-devkit","title":"JetBrains IntelliJ IDEA server-side request forgery in DevKit debug listener","severity":"medium","exploited":false,"published_at":"2026-08-17T16:17:52.43+00:00","url":"https://junglewise.ai/threats/cve-2026-75053-jetbrains-intellij-idea-server-side-request-forgery-in-devkit"},{"cve":"CVE-2026-75052","cvss":3.6,"epss":0.0018,"slug":"cve-2026-75052-jetbrains-intellij-idea-command-execution-via-markdown-preview","title":"JetBrains IntelliJ IDEA command execution via Markdown preview","severity":"low","exploited":false,"published_at":"2026-08-17T16:17:52.32+00:00","url":"https://junglewise.ai/threats/cve-2026-75052-jetbrains-intellij-idea-command-execution-via-markdown-preview"},{"cve":"CVE-2026-64815","cvss":8.1,"slug":"cve-2026-64815-jetbrains-intellij-idea-code-injection-in-ui-designer","title":"JetBrains IntelliJ IDEA code injection in UI Designer","severity":"high","exploited":false,"published_at":"2026-07-23T12:18:37.12+00:00","url":"https://junglewise.ai/threats/cve-2026-64815-jetbrains-intellij-idea-code-injection-in-ui-designer"},{"cve":"CVE-2026-64814","cvss":8.6,"slug":"cve-2026-64814-jetbrains-intellij-idea-unauthorized-file-access-in-remote","title":"JetBrains IntelliJ IDEA unauthorized file access in Remote Development","severity":"high","exploited":false,"published_at":"2026-07-23T12:18:37.01+00:00","url":"https://junglewise.ai/threats/cve-2026-64814-jetbrains-intellij-idea-unauthorized-file-access-in-remote"},{"cve":"CVE-2026-64813","cvss":10,"slug":"cve-2026-64813-jetbrains-intellij-idea-unauthorized-settings-modification-in","title":"JetBrains IntelliJ IDEA unauthorized settings modification in Remote Development","severity":"critical","exploited":false,"published_at":"2026-07-23T12:18:36.897+00:00","url":"https://junglewise.ai/threats/cve-2026-64813-jetbrains-intellij-idea-unauthorized-settings-modification-in"},{"cve":"CVE-2026-64812","cvss":10,"slug":"cve-2026-64812-jetbrains-intellij-idea-unauthorized-input-injection-in-remote","title":"JetBrains IntelliJ IDEA unauthorized input injection in Remote Development session","severity":"critical","exploited":false,"published_at":"2026-07-23T12:18:36.783+00:00","url":"https://junglewise.ai/threats/cve-2026-64812-jetbrains-intellij-idea-unauthorized-input-injection-in-remote"},{"cve":"CVE-2026-64811","cvss":7.8,"slug":"cve-2026-64811-jetbrains-intellij-idea-arbitrary-code-execution-in-development","title":"JetBrains IntelliJ IDEA arbitrary code execution in development container configuration","severity":"high","exploited":false,"published_at":"2026-07-23T12:18:36.663+00:00","url":"https://junglewise.ai/threats/cve-2026-64811-jetbrains-intellij-idea-arbitrary-code-execution-in-development"},{"cve":"CVE-2026-64810","cvss":4.3,"slug":"cve-2026-64810-jetbrains-intellij-idea-html-injection-in-ide-notifications","title":"JetBrains IntelliJ IDEA HTML injection in IDE notifications","severity":"medium","exploited":false,"published_at":"2026-07-23T12:18:36.553+00:00","url":"https://junglewise.ai/threats/cve-2026-64810-jetbrains-intellij-idea-html-injection-in-ide-notifications"},{"cve":"CVE-2026-59792","cvss":9.6,"slug":"cve-2026-59792-jetbrains-intellij-idea-code-execution-via-path-traversal-in","title":"JetBrains IntelliJ IDEA code execution via path traversal in workspace ID handling","severity":"critical","exploited":false,"published_at":"2026-07-10T15:16:48.24+00:00","url":"https://junglewise.ai/threats/cve-2026-59792-jetbrains-intellij-idea-code-execution-via-path-traversal-in"},{"cve":"CVE-2026-49383","cvss":3.3,"slug":"cve-2026-49383-jetbrains-intellij-idea-xxe-in-ui-designer-form-parser","title":"JetBrains IntelliJ IDEA XXE in UI Designer form parser","severity":"low","exploited":false,"published_at":"2026-05-29T19:16:28.34+00:00","url":"https://junglewise.ai/threats/cve-2026-49383-jetbrains-intellij-idea-xxe-in-ui-designer-form-parser"},{"cve":"CVE-2026-49382","cvss":4.5,"slug":"cve-2026-49382-jetbrains-intellij-idea-template-injection-in-copyright-plugin","title":"JetBrains IntelliJ IDEA template injection in Copyright plugin","severity":"medium","exploited":false,"published_at":"2026-05-29T19:16:28.223+00:00","url":"https://junglewise.ai/threats/cve-2026-49382-jetbrains-intellij-idea-template-injection-in-copyright-plugin"},{"cve":"CVE-2026-49367","cvss":8,"slug":"cve-2026-49367-jetbrains-intellij-idea-command-execution-via-guest-account","title":"JetBrains IntelliJ IDEA command execution via guest account","severity":"high","exploited":false,"published_at":"2026-05-29T19:16:26.44+00:00","url":"https://junglewise.ai/threats/cve-2026-49367-jetbrains-intellij-idea-command-execution-via-guest-account"},{"cve":"CVE-2026-49366","cvss":7.8,"slug":"cve-2026-49366-jetbrains-intellij-idea-command-injection-in-filename-completion","title":"JetBrains IntelliJ IDEA command injection in filename completion","severity":"high","exploited":false,"published_at":"2026-05-29T19:16:26.313+00:00","url":"https://junglewise.ai/threats/cve-2026-49366-jetbrains-intellij-idea-command-injection-in-filename-completion"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":2,"exploited":0,"vulnerabilities":6},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Jetbrains YouTrack","slug":"youtrack","vulnerabilities":43,"url":"https://junglewise.ai/threats/technologies/youtrack"},{"name":"Jetbrains TeamCity","slug":"teamcity","vulnerabilities":22,"url":"https://junglewise.ai/threats/technologies/teamcity"},{"name":"Jetbrains GoLand","slug":"goland","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/goland"},{"name":"Jetbrains Hub","slug":"hub","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/hub"},{"name":"Jetbrains PyCharm","slug":"pycharm","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/pycharm"},{"name":"Jetbrains Webstorm","slug":"webstorm","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/webstorm"}],"technology":{"hub":true,"name":"Jetbrains IntelliJ IDEA","slug":"intellij-idea","vendor":{"name":"Jetbrains","slug":"jetbrains","url":"https://junglewise.ai/threats/vendors/jetbrains"},"aliases":[],"category":"IDE","homepage":"https://www.jetbrains.com/idea/","repo_url":"https://github.com/JetBrains/intellij-community","description":"An integrated development environment for Java and other programming languages.","url":"https://junglewise.ai/threats/technologies/intellij-idea"},"most_severe":[{"cve":"CVE-2026-64813","cvss":10,"slug":"cve-2026-64813-jetbrains-intellij-idea-unauthorized-settings-modification-in","title":"JetBrains IntelliJ IDEA unauthorized settings modification in Remote Development","severity":"critical","exploited":false,"published_at":"2026-07-23T12:18:36.897+00:00","url":"https://junglewise.ai/threats/cve-2026-64813-jetbrains-intellij-idea-unauthorized-settings-modification-in"},{"cve":"CVE-2026-64812","cvss":10,"slug":"cve-2026-64812-jetbrains-intellij-idea-unauthorized-input-injection-in-remote","title":"JetBrains IntelliJ IDEA unauthorized input injection in Remote Development session","severity":"critical","exploited":false,"published_at":"2026-07-23T12:18:36.783+00:00","url":"https://junglewise.ai/threats/cve-2026-64812-jetbrains-intellij-idea-unauthorized-input-injection-in-remote"},{"cve":"CVE-2026-59792","cvss":9.6,"slug":"cve-2026-59792-jetbrains-intellij-idea-code-execution-via-path-traversal-in","title":"JetBrains IntelliJ IDEA code execution via path traversal in workspace ID handling","severity":"critical","exploited":false,"published_at":"2026-07-10T15:16:48.24+00:00","url":"https://junglewise.ai/threats/cve-2026-59792-jetbrains-intellij-idea-code-execution-via-path-traversal-in"},{"cve":"CVE-2026-64814","cvss":8.6,"slug":"cve-2026-64814-jetbrains-intellij-idea-unauthorized-file-access-in-remote","title":"JetBrains IntelliJ IDEA unauthorized file access in Remote Development","severity":"high","exploited":false,"published_at":"2026-07-23T12:18:37.01+00:00","url":"https://junglewise.ai/threats/cve-2026-64814-jetbrains-intellij-idea-unauthorized-file-access-in-remote"},{"cve":"CVE-2026-86502","cvss":8.4,"epss":0.0021,"slug":"cve-2026-86502-jetbrains-intellij-idea-missing-tls-and-authentication-in-ijent","title":"JetBrains IntelliJ IDEA missing TLS and authentication in IJent gRPC server","severity":"high","exploited":false,"published_at":"2026-09-07T17:17:28.67+00:00","url":"https://junglewise.ai/threats/cve-2026-86502-jetbrains-intellij-idea-missing-tls-and-authentication-in-ijent"},{"cve":"CVE-2026-64815","cvss":8.1,"slug":"cve-2026-64815-jetbrains-intellij-idea-code-injection-in-ui-designer","title":"JetBrains IntelliJ IDEA code injection in UI Designer","severity":"high","exploited":false,"published_at":"2026-07-23T12:18:37.12+00:00","url":"https://junglewise.ai/threats/cve-2026-64815-jetbrains-intellij-idea-code-injection-in-ui-designer"},{"cve":"CVE-2026-49367","cvss":8,"slug":"cve-2026-49367-jetbrains-intellij-idea-command-execution-via-guest-account","title":"JetBrains IntelliJ IDEA command execution via guest account","severity":"high","exploited":false,"published_at":"2026-05-29T19:16:26.44+00:00","url":"https://junglewise.ai/threats/cve-2026-49367-jetbrains-intellij-idea-command-execution-via-guest-account"},{"cve":"CVE-2026-86504","cvss":7.8,"epss":0.0019,"slug":"cve-2026-86504-jetbrains-intellij-idea-dev-container-code-execution-via-missing","title":"JetBrains IntelliJ IDEA Dev Container code execution via missing trust confirmation","severity":"high","exploited":false,"published_at":"2026-09-07T17:17:28.903+00:00","url":"https://junglewise.ai/threats/cve-2026-86504-jetbrains-intellij-idea-dev-container-code-execution-via-missing"},{"cve":"CVE-2026-75056","cvss":7.8,"epss":0.0019,"slug":"cve-2026-75056-jetbrains-intellij-idea-remote-code-execution-in-markdown-export","title":"JetBrains IntelliJ IDEA remote code execution in Markdown export","severity":"high","exploited":false,"published_at":"2026-08-17T16:17:52.77+00:00","url":"https://junglewise.ai/threats/cve-2026-75056-jetbrains-intellij-idea-remote-code-execution-in-markdown-export"},{"cve":"CVE-2026-64811","cvss":7.8,"slug":"cve-2026-64811-jetbrains-intellij-idea-arbitrary-code-execution-in-development","title":"JetBrains IntelliJ IDEA arbitrary code execution in development container configuration","severity":"high","exploited":false,"published_at":"2026-07-23T12:18:36.663+00:00","url":"https://junglewise.ai/threats/cve-2026-64811-jetbrains-intellij-idea-arbitrary-code-execution-in-development"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}