PULSE
FEED
ransomincransom reclama a 1da9100e55aqf21eb651eNea · ALransombraincipher reclama a Mutares.com · DE · Manufacturingransomgenesis reclama a Xinos Construction · US · Manufacturingransomgenesis reclama a Insation Technologies · US · Technologyransomeclipse reclama a Comercial en Fletes México, S.A. de C.V. · MX · Transportationransomincransom reclama a https://www.sleep-clinic.ca/ · CA · Healthcareransomsilentransomgroup reclama a Tucker Ellis · US · Professional Servicesransomsilentransomgroup reclama a Wachtell, Lipton, Rosen & Katz · US · Professional Servicesransomsilentransomgroup reclama a B... law · Professional Servicesransomakira reclama a Ligne Roset · FR · Retail & E-Commerceransomakira reclama a Houston Machine and Thread · US · Manufacturingransomdirewolf reclama a Algonomy · US · Technologyransomobsoft reclama a Company #6ransomakira reclama a Hudson & Hudson SignProducts · US · Manufacturingransomincransom reclama a 1da9100e55aqf21eb651eNea · ALransombraincipher reclama a Mutares.com · DE · Manufacturingransomgenesis reclama a Xinos Construction · US · Manufacturingransomgenesis reclama a Insation Technologies · US · Technologyransomeclipse reclama a Comercial en Fletes México, S.A. de C.V. · MX · Transportationransomincransom reclama a https://www.sleep-clinic.ca/ · CA · Healthcareransomsilentransomgroup reclama a Tucker Ellis · US · Professional Servicesransomsilentransomgroup reclama a Wachtell, Lipton, Rosen & Katz · US · Professional Servicesransomsilentransomgroup reclama a B... law · Professional Servicesransomakira reclama a Ligne Roset · FR · Retail & E-Commerceransomakira reclama a Houston Machine and Thread · US · Manufacturingransomdirewolf reclama a Algonomy · US · Technologyransomobsoft reclama a Company #6ransomakira reclama a Hudson & Hudson SignProducts · US · Manufacturing
← All CVEs
CVE WatchNov 6, 2026

CVE-2026-123838

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file

CVSS

7.8

High

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Nov 6, 2026 · Last modified: Nov 6, 2026 · CWE-829

EPSS · 30d

Not enough EPSS history yet.

Technical description

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1238584.4 MED
—
——0In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects9h
CVE-2026-1238545.5 MED
—
——0In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module9h
CVE-2026-1238537.8 HIG
—
——0In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process9h
CVE-2026-1238497.0 HIG
—
——0In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers9h
CVE-2026-1238433.3 LOW
—
——0In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration9h
CVE-2026-1238333.6 LOW
—
——0In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects9h