BaselineWatch
58218 CVEs · 127 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known58,218 New, 24 h1,121 Changed, 24 h2,526 In KEV127 Public exploit1,577 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-64813 10.0 critical 1.0% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session Sat 24 Oct
CVE-2026-59792 9.8 critical 1.0% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible Sat 24 Oct
CVE-2026-64812 10.0 critical 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session Sat 24 Oct
CVE-2026-64815 9.8 critical 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files Sat 24 Oct
CVE-2026-64814 8.6 high 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session Sat 24 Oct
CVE-2026-64811 7.8 high 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration Sat 24 Oct
CVE-2026-75056 7.8 high 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible Fri 23 Oct
CVE-2026-41882 7.5 high 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server Mon 26 Oct
CVE-2026-75054 6.3 medium 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects Fri 23 Oct
CVE-2026-75057 6.2 medium 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log Fri 23 Oct
CVE-2026-64810 6.1 medium 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking Sat 24 Oct
CVE-2026-75055 5.5 medium 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE Fri 23 Oct
CVE-2026-75058 5.5 medium 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers Fri 23 Oct
CVE-2026-75053 5.4 medium 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint Fri 23 Oct
CVE-2026-75052 4.4 medium 0.00% jetbrains, intellij_idea In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects Fri 23 Oct

15 of 15

Download these 15 as CSV · subscribe to this list.

EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.