https://cvebrief.com/archive/cves/vendor/jetbrains/ High and critical JetBrains vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Tue, 08 Sep 2026 12:00:00 GMT https://cvebrief.com/cve/cve-2026-86478/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-86478 Tue, 08 Sep 2026 12:00:00 GMT An improper authentication vulnerability in the JetBrains YouTrack Helpdesk feature allows unauthenticated attackers to perform account takeovers by spoofing email addresses. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-86479/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-86479 Tue, 08 Sep 2026 12:00:00 GMT In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-86480/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-86480 Tue, 08 Sep 2026 12:00:00 GMT JetBrains Hub contains a flaw allowing unauthenticated attackers to register a trusted service, resulting in the acquisition of superuser privileges. Fix documented: 2026.2.52442 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-86482/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-86482 Tue, 08 Sep 2026 12:00:00 GMT In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation Fix documented: 2026.2.18634 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-86492/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-86492 Tue, 08 Sep 2026 12:00:00 GMT In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens Fix documented: 2026.2.18634 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-86494/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-86494 Tue, 08 Sep 2026 12:00:00 GMT In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues Fix documented: 2026.2.18634 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-86498/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-86498 Tue, 08 Sep 2026 12:00:00 GMT In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-86502/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-86502 Tue, 08 Sep 2026 12:00:00 GMT In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts Fix documented: 2026.2.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-86504/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-86504 Tue, 08 Sep 2026 12:00:00 GMT In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution Fix documented: 2026.2.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-75044/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-75044 Tue, 18 Aug 2026 12:00:00 GMT In JetBrains YouTrack before 2025 Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-75045/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-75045 Tue, 18 Aug 2026 12:00:00 GMT JetBrains YouTrack is vulnerable to unauthorized database backup downloads by unauthenticated attackers due to an issue with shared draft signatures. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-75048/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-75048 Tue, 18 Aug 2026 12:00:00 GMT In JetBrains YouTrack before 2026 Fix documented: 2026.2.18068 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-75051/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-75051 Tue, 18 Aug 2026 12:00:00 GMT In JetBrains YouTrack before 2026 Fix documented: 2026.2.17917 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-75056/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-75056 Tue, 18 Aug 2026 12:00:00 GMT In JetBrains IntelliJ IDEA before 2026 Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-75060/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-75060 Tue, 18 Aug 2026 12:00:00 GMT In JetBrains PyCharm before 2026 Fix documented: 2026.2.1 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-63077/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-63077 Tue, 28 Jul 2026 12:00:00 GMT An unauthenticated remote code execution vulnerability exists in the JetBrains TeamCity agent polling protocol. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64802/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64802 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains GoLand before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64803/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64803 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains GoLand before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64804/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64804 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains WebStorm before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64805/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64805 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains WebStorm before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64806/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64806 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains WebStorm before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64807/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64807 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains WebStorm before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64808/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64808 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains PhpStorm before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64809/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64809 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains PhpStorm before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64811/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64811 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains IntelliJ IDEA before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64812/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64812 Fri, 24 Jul 2026 12:00:00 GMT JetBrains IntelliJ IDEA is susceptible to unauthorized input injection during Remote Development sessions, allowing unauthenticated remote attackers to manipulate application behavior. Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64813/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64813 Fri, 24 Jul 2026 12:00:00 GMT JetBrains IntelliJ IDEA is vulnerable to unauthorized settings modification during Remote Development sessions, enabling unauthenticated attackers to alter critical application configurations. Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64814/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64814 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains IntelliJ IDEA before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-64815/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-64815 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains IntelliJ IDEA before 2026 Fix documented: 2026.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-65906/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-65906 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains TeamCity before 2026 Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-65908/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-65908 Fri, 24 Jul 2026 12:00:00 GMT In JetBrains PyCharm before 2026 Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-62422/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-62422 Wed, 15 Jul 2026 12:00:00 GMT JetBrains YouTrack is affected by an authentication bypass vulnerability allowing unauthenticated attackers to gain administrative access via direct database manipulation. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-59794/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-59794 Sun, 12 Jul 2026 12:00:00 GMT In JetBrains TeamCity before 2026 Fix documented: 2026.1.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-59792/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-59792 Sat, 11 Jul 2026 12:00:00 GMT JetBrains IntelliJ IDEA is vulnerable to remote code execution due to path traversal in project workspace ID handling. Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-59793/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-59793 Sat, 11 Jul 2026 12:00:00 GMT In JetBrains TeamCity before 2026 Fix documented: 2026.1.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-59795/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-59795 Sat, 11 Jul 2026 12:00:00 GMT In JetBrains TeamCity before 2026 Fix documented: 2026.1.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-59796/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-59796 Sat, 11 Jul 2026 12:00:00 GMT In JetBrains TeamCity before 2026 Fix documented: 2026.1.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-50242/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-50242 Sat, 20 Jun 2026 12:00:00 GMT JetBrains Hub contains an authentication bypass vulnerability via direct database access that allows unauthorized administrative control. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-56142/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-56142 Sat, 20 Jun 2026 12:00:00 GMT JetBrains Hub is susceptible to privilege escalation by allowing the attachment of unauthorized authentication details to user accounts. Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-49368/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-49368 Sat, 30 May 2026 12:00:00 GMT In JetBrains YouTrack before 2026 Fix documented: 2026.1.13162 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-44413/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-44413 Tue, 12 May 2026 12:00:00 GMT In JetBrains TeamCity before 2026 Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-41882/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-41882 Fri, 01 May 2026 12:00:00 GMT In JetBrains IntelliJ IDEA before 2024 Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2024-27199/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2024-27199 Tue, 21 Apr 2026 12:00:00 GMT JetBrains TeamCity Relative Path Traversal Vulnerability - Active in CISA KEV catalog. Fix documented: 2023.11.4 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-33392/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-33392 Sat, 18 Apr 2026 12:00:00 GMT In JetBrains YouTrack before 2025 Fix documented: 2025.3.131383 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-28193/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-28193 Thu, 26 Feb 2026 12:00:00 GMT In JetBrains YouTrack before 2025 Fix documented: 2025.3.121962 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-25847/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-25847 Tue, 10 Feb 2026 12:00:00 GMT In JetBrains PyCharm before 2025 Fix documented: 2025.3.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-25848/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2026-25848 Tue, 10 Feb 2026 12:00:00 GMT JetBrains Hub versions prior to 2025.3.119807 contain an authentication bypass vulnerability that allows unauthenticated attackers to perform administrative actions. Fix documented: 2025.3.119807 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-64456/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2025-64456 Tue, 11 Nov 2025 12:00:00 GMT In JetBrains ReSharper before 2025 Fix documented: 2025.2.4 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-64685/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2025-64685 Tue, 11 Nov 2025 12:00:00 GMT In JetBrains YouTrack before 2025 Fix documented: 2025.3.104432 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-64689/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-jetbrains-CVE-2025-64689 Tue, 11 Nov 2025 12:00:00 GMT In JetBrains YouTrack before 2025.3.104432 misconfiguration in the Junie could lead to exposure of the global Junie token Independent analyst report on CVE Brief.