Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-63077KEVexploit ×8 | 9.8 critical | 94.0% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | 24 Oct |
| CVE-2026-64813 | 10.0 critical | 1.0% | jetbrains, intellij_idea | In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session | 24 Oct |
| CVE-2026-65906 | 10.0 critical | 1.0% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible | 24 Oct |
| CVE-2026-50242 | 9.8 critical | 1.0% | jetbrains, hub | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible | 26 Oct |
| CVE-2026-56141 | 9.8 critical | 1.0% | jetbrains, hub | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible | 26 Oct |
| CVE-2026-59792 | 9.8 critical | 1.0% | jetbrains, intellij_idea | In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible | 24 Oct |
| CVE-2026-62422 | 9.8 critical | 1.0% | jetbrains, youtrack | In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible | 24 Oct |
| CVE-2026-65907 | 9.1 critical | 1.0% | no CPE yet | In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible | 24 Oct |
| CVE-2026-64812 | 10.0 critical | 0.00% | jetbrains, intellij_idea | In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session | 24 Oct |
| CVE-2026-106218 | 10.0 critical | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | 8 Oct |
| CVE-2026-41153 | 9.8 critical | 0.00% | jetbrains, junie | In JetBrains Junie before 252.549.29 command execution was possible via malicious project file | Mon 26 Oct |
| CVE-2026-53914 | 9.8 critical | 0.00% | jetbrains, kotlin | In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata | 25 Oct |
| CVE-2026-57926 | 9.8 critical | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack | 25 Oct |
| CVE-2026-64815 | 9.8 critical | 0.00% | jetbrains, intellij_idea | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files | 24 Oct |
| CVE-2026-111094 | 9.8 critical | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible | 16 Oct |
| CVE-2026-108474 | 9.8 critical | 0.00% | no CPE yet | In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions | 14 Oct |
| CVE-2026-118697 | 9.0 critical | 0.00% | jetbrains, toolbox app, intellij idea | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates | Sat 31 Oct |
17 of 17
Download these 17 as CSV · subscribe to this list.
EPSS scores: 2026-11-01. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.