WID-SEC-W-2026-2505

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

JetBrains IntelliJ IDEA: Mehrere Schwachstellen

view advisory published 2026-07-23

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JetBrains IntelliJ IDEA ausnutzen, um Informationen offenzulegen, um Code auszuführen und um Sicherheitsmaßnahmen zu umgehen.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2026-64815UScritical9.8—
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files
CVE-2026-64814US—OT elevated—
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
CVE-2026-64813US——
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
CVE-2026-64812US—OT elevated—
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session
CVE-2026-64811US——
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration
CVE-2026-64810USmedium6.1—
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan