PULSE
EN VIVO50señales / 24h
EN
FEED
ransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Servicesransomthegentlemen reclama a Tikona Infinet · IN · Technologyransomthegentlemen reclama a TC Printing · AU · Manufacturingransomthegentlemen reclama a Oldelval Oleoductos del Valle · AR · Energy & Utilitiesransomthegentlemen reclama a Decoupe Laser Services · FR · Manufacturingransomthegentlemen reclama a Thialf · NL · Energy & Utilitiesransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Servicesransomthegentlemen reclama a Tikona Infinet · IN · Technologyransomthegentlemen reclama a TC Printing · AU · Manufacturingransomthegentlemen reclama a Oldelval Oleoductos del Valle · AR · Energy & Utilitiesransomthegentlemen reclama a Decoupe Laser Services · FR · Manufacturingransomthegentlemen reclama a Thialf · NL · Energy & Utilities
← Todos los CVEs
CVE Watch23 jul 2026

CVE-2026-64806

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpret

CVSS

8.4

Alto

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 23 jul 2026 · Última mod.: 23 jul 2026 · CWE-829

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-648117.8 ALT
—
——0In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration6hCVE-2026-648098.4 ALT
—
——0In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter6hCVE-2026-648088.4 ALT
—
——0In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling6hCVE-2026-648077.8 ALT
—
——0In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration6hCVE-2026-648058.4 ALT
—
——0In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling6hCVE-2026-648048.4 ALT
—
——0In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling6h