CVE-2026-123854
In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module
CVSS
5.5
Medio
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 6 nov 2026 · Última mod.: 6 nov 2026 · CWE-829
Sin historial EPSS suficiente todavía.
In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1238584.4 MED—
——0In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects8hCVE-2026-1238537.8 ALT—
——0In JetBrains IntelliJ IDEA before 2026.3,
2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process8hCVE-2026-1238497.0 ALT—
——0In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers8hCVE-2026-1238433.3 BAJ—
——0In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration8hCVE-2026-1238387.8 ALT—
——0In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file8hCVE-2026-1238333.6 BAJ—
——0In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects8h