PULSEUnderground Intel

LIVE52signals / 24h

FEED

ransomplay reclama a Record Go Alquiler · ES · Hospitalityransomplay reclama a Restaurant Depot · US · Retail & E-Commerceransomplay reclama a The DeBruler · US · Not Foundransomincransom reclama a cabincreekhealth.com · US · Healthcareransomcmdorganization reclama a T Simon Jewelers · US · Retail & E-Commerceransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Servicesransomplay reclama a Record Go Alquiler · ES · Hospitalityransomplay reclama a Restaurant Depot · US · Retail & E-Commerceransomplay reclama a The DeBruler · US · Not Foundransomincransom reclama a cabincreekhealth.com · US · Healthcareransomcmdorganization reclama a T Simon Jewelers · US · Retail & E-Commerceransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Services

CVE WatchJul 23, 2026

CVE-2026-65906

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible

CVSS

8.8

High

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Jul 23, 2026 · Last modified: Jul 23, 2026 · CWE-94

EPSS · 30d

Not enough EPSS history yet.

Technical description

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible

Official references

www.jetbrains.comhttps://www.jetbrains.com/privacy-security/issues-fixed/

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-4766810.0 CRI

———DbGate is cross-platform database manager. In versions 7.1.8 and prior, DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `functionName` parameter of JSON script `assign` commands. The `functionName` value is interpolated directly into dynamically generated JavaScript source code via string concatenation. The generated code is then executed in a forked Node.js child process. Version 7.1.9 contains a patch.4h CVE-2026-659079.1 CRI

———In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible7h CVE-2026-648158.1 HIG

——0In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files8h CVE-2026-648037.8 HIG

——0In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK8h CVE-2026-648027.8 HIG

——0In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration8h CVE-2026-595439.9 CRI

——0Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.7h