Vulnerabilities

TI-2026-52744 CVE-2026-75058 · GHSA-4qhh-vhvg-gc9c

In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers

LOW 24

In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00153 Published 2026-08-17 Fixed in 2026.2.1 CWE-611

TI-2026-52742 CVE-2026-75056 · GHSA-44p4-x76v-6w5f

LOW 35

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00194 Published 2026-08-17 Fixed in 2026.2.1 CWE-78

TI-2026-52741 CVE-2026-75055 · GHSA-pv7f-2fc9-p5x3

LOW 24

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00153 Published 2026-08-17 Fixed in 2026.2.1 CWE-611

TI-2026-52740 CVE-2026-75054 · GHSA-mw34-c6m6-g442

LOW 27

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00153 Published 2026-08-17 Fixed in 2026.2.1 CWE-918

TI-2026-52739 CVE-2026-75053 · GHSA-6v6x-gp82-9jqj

LOW 24

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0024 Published 2026-08-17 Fixed in 2026.2.1 CWE-918

TI-2026-52738 CVE-2026-75052 · GHSA-jx69-9f6w-q2xj

LOW 20

In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00175 Published 2026-08-17 Fixed in 2026.2.1 CWE-77