JetBrains ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità di sicurezza, di cui 1 con gravità "critica" e 4 con gravità “alta”, in diversi prodotti. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eludere i meccanismi di sicurezza, accedere a informazioni sensibili ed eseguire codice arbitrario remoto sui sistemi interessati.
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.1, CVEs: CVE-2026-111096, CVE-2026-111095, CVE-2026-111094, Summary: CVE-2026-111096 : In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible CVE-2026-111095 : In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible CVE-2026-111094 : In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote…
Serial number: AV26-1050 Date: October 15, 2026 As of October 15, 2026, JetBrains is affected by vulnerabilities in the following products: Datalore Prior to 2026.2.1 Junie CLI Prior to 26.8.3 TeamCity Prior to 2026.2 Prior to 2026.1.4 Prior to 2025.11.8 YouTrack Prior to 2026.2.19575 Piror to 2026.3.16075 Prior to 2026.3.16397 Prior to 2026.3.16402 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.…
Serial number: AV26-1032 Date: October 13, 2026 As of October 9, 2026, JetBrains is affected by a vulnerability in the following product: Exposed Prior to 1.5.1 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. JetBrains Fixed security issues
Serial number: AV26-1012 Date: October 7, 2026 As of October 6, 2026, JetBrains is affected by vulnerabilities in the following product: TeamCity Prior to 2026.1.32025.11.7 Prior to 2026.2.1 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. JetBrains Fixed security issues
JetBrains ha rilasciato aggiornamenti di sicurezza che sanano due vulnerabilità, di cui una con gravità "alta", in TeamCity. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a utenti malintenzionati remoti di eseguire codice arbitrario sui sistemi interessati.
Serial number: AV26-979 Date: October 1, 2026 As of September 30, 2026, JetBrains is affected by vulnerabilities in the following products: Hub Prior to 2026.2.52366 IntelliJ IDEA Prior to 2026.2.3 Rider Prior to 2026.2.1 TeamCity Prior to 2026.2, 2026.1.4 and 2025.11.8 YouTrack Prior to 2026.2.18991 and 2026.2.19422 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Fixed security issues
JetBrains ha rilasciato aggiornamenti di sicurezza che sanano molteplici vulnerabilità, tra cui 9 con gravità "alta" nei prodotti YouTrack, Hub, IntelliJ IDEA e TeamCity.
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.7, CVEs: CVE-2026-100266, Summary: In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.8, CVEs: CVE-2026-100256, Summary: In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: CVE-2026-100253, CVE-2026-100254, CVE-2026-100255, Summary: CVE-2026-100253 (CVSS: 8.8): In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL CVE-2026-100254 (CVSS: 8.8): In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF…
Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 9.8, CVEs: CVE-2026-63077, Summary: An unauthenticated remote code execution vulnerability affects TeamCity On-Premises. An attacker with HTTP or HTTPS access to a vulnerable server can exploit the TeamCity agent polling protocol to bypass authentication and execute operating-system commands with the privileges of the TeamCity server process.
This One Goes to Sixteen!Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, and not to be outdone, we even have a Metasploit scanner to watch the watchers!New module content (16)Elasticsearch ingest-attachment Apache Tika XFA XXE Local File ReadAuthors: Bourbon Offensive Security Services and Jean-Marie BourbonType: AuxiliaryPull request: #21739…
Serial Number: AV26-891Date: September 8, 2026 As of September 7, 2026, JetBrains is affected by vulnerabilities in the following products: GoLand Prior to 2026.2.2.1 Hub Prior to 2026.2.52442 IntelliJ IDEA Prior to 2026.2.2 YouTrack Multiple versions The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Fixed security issues
Aggiornamenti di sicurezza JetBrains sanano alcune vulnerabilità, di cui 2 con gravità “critica” e 7 con gravità “alta”, che interessano vari prodotti. Tali vulnerabilità potrebbero consentire a un utente malintenzionato di accedere a informazioni riservate, alterare dati, eludere i meccanismi di sicurezza ed eseguire codice arbitrario sui sistemi interessati.
Serial Number: AV26-825Date: August 18, 2026 As of August 17, 2026, JetBrains is affected by vulnerabilities in the following products: IntelliJ IDEA Prior to 2026.1.5 Prior to 2026.2.1 Ktor Prior to 3.4.1 PyCharm Prior to 2026.2.1 YouTrack Prior to 2025.3.156085 Prior to 2026.1.13901 Prior to 2026.1.13903 Prior to 2026.1.13913 Prior to 2026.1.13914 Prior to 2026.2.17917 Prior to 2026.2.17950 Prior to 2026.2.18068 Prior to 2026.2.18095 Prior to 2026.2.18112 The Cyber Centre encourages users and…
Aggiornamenti di sicurezza sanano molteplici vulnerabilità, di cui una con gravità "critica" e 6 con gravità "alta", presenti in vari prodotti della suite JetBrains.
For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Minnesota IT Services has confirmed coordinated cyberattacks affecting more than 30 community water utilities across the state. The incidents briefly disrupted a treatment plant in Braham and affected industrial control systems. Officials reported that drinking water safety was not affected. While the attack was not officially attributed, federal…
A coordinated campaign of at least 15 JetBrains IDE plugins, published under seven vendor accounts, exfiltrates the AI provider API key you paste into their settings. Category: Vulnerabilities & Threats