Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 5 total.
Arbitrary code execution in JetBrains IntelliJ IDEA via dev container configuration (CVE-2026-64811)
JetBrains IntelliJ IDEA contains a vulnerability that allows arbitrary code execution through development container configuration before the user has granted project trust. An attacker who can supply a malicious proje...
Fixed in 2026.2
Unauthorized input injection in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64812)
JetBrains IntelliJ IDEA contains a vulnerability that allows unauthorized input injection during a Remote Development session. An attacker capable of exploiting this flaw could inject arbitrary input into the remote s...
Fixed in 2026.2
Unauthorized file access in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64814)
JetBrains IntelliJ IDEA before version 2026.2 contains a vulnerability that allows unauthorized file access during a Remote Development session. An attacker exploiting this flaw could access files without proper autho...
Fixed in 2026.2
Unauthorized settings modification in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64813)
JetBrains IntelliJ IDEA contains a vulnerability that allows unauthorized modification of settings within a Remote Development session. This could permit an attacker with access to the remote session to alter IDE or p...
Fixed in 2026.2
Arbitrary code injection in JetBrains IntelliJ IDEA via UI Designer form files (CVE-2026-64815)
JetBrains IntelliJ IDEA before version 2026.2 is affected by a vulnerability that allows arbitrary code injection through UI Designer form files. An attacker able to supply a malicious form file could achieve arbitrar...
Fixed in 2026.2