CVE Watch6 nov 2026

CVE-2026-123302

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script e

CVSS

7.8

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 6 nov 2026 · Última mod.: 6 nov 2026 · CWE-829

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery

Referencias oficiales

www.jetbrains.comhttps://www.jetbrains.com/privacy-security/issues-fixed/

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1233257.1 ALT

—

———In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page9h CVE-2026-1233226.3 MED

—

———In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader9h CVE-2026-1233217.8 ALT

—

———In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects9h CVE-2026-1233133.3 BAJ

—

———In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settings9h CVE-2026-1233086.3 MED

—

———In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects9h CVE-2026-1233047.8 ALT

—

———In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path9h