Vulnerabilities

TI-2026-46344 CVE-2026-64815 · GHSA-r2fm-vv3h-4qf2

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files

MEDIUM 43

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00482 Published 2026-07-23 Fixed in 2026.2 CWE-94

TI-2026-46343 CVE-2026-64814 · GHSA-893f-8w7m-vh3c

MEDIUM 43

In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00394 Published 2026-07-23 Fixed in 2026.2 CWE-862

TI-2026-46342 CVE-2026-64813 · GHSA-7xqr-wvrf-3jr9

MEDIUM 49

In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00522 Published 2026-07-23 Fixed in 2026.2 CWE-602

TI-2026-46341 CVE-2026-64812 · GHSA-995f-8qgf-h52p

MEDIUM 49

In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00483 Published 2026-07-23 Fixed in 2026.2 CWE-306

TI-2026-46340 CVE-2026-64811 · GHSA-pjq3-x359-m2pf

LOW 35

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00185 Published 2026-07-23 Fixed in 2026.2 CWE-829

TI-2026-46339 CVE-2026-64810 · GHSA-3rwj-4395-cj7h

LOW 27

In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00253 Published 2026-07-23 Fixed in 2026.2 CWE-79