PULSEUnderground Intel

EN VIVO52señales / 24h

FEED

ransomplay reclama a Record Go Alquiler · ES · Hospitalityransomplay reclama a Restaurant Depot · US · Retail & E-Commerceransomplay reclama a The DeBruler · US · Not Foundransomincransom reclama a cabincreekhealth.com · US · Healthcareransomcmdorganization reclama a T Simon Jewelers · US · Retail & E-Commerceransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Servicesransomplay reclama a Record Go Alquiler · ES · Hospitalityransomplay reclama a Restaurant Depot · US · Retail & E-Commerceransomplay reclama a The DeBruler · US · Not Foundransomincransom reclama a cabincreekhealth.com · US · Healthcareransomcmdorganization reclama a T Simon Jewelers · US · Retail & E-Commerceransomkillsec reclama a cashcowboy · US · Financial Servicesransomkillsec reclama a Bulwark Exterminating · US · Otherransomkillsec reclama a origins ivf · IN · Healthcareransomqilin reclama a Machinerie P&W · CA · Manufacturingransomqilin reclama a ABM Enviro · CA · Professional Servicesransomkrybit reclama a nilepet.com · EG · Retail & E-Commerceransomthegentlemen reclama a European Design · CA · Otherransomthegentlemen reclama a MK Jewelry · MK · Retail & E-Commerceransomthegentlemen reclama a GUERREIROS seguros · PT · Financial Services

← Todos los CVEs

CVE Watch23 jul 2026

CVE-2026-65907

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

CVSS

9.1

Crítico

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 23 jul 2026 · Última mod.: 23 jul 2026 · CWE-94

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

Referencias oficiales

www.jetbrains.comhttps://www.jetbrains.com/privacy-security/issues-fixed/

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-4766810.0 CRÍ

———DbGate is cross-platform database manager. In versions 7.1.8 and prior, DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `functionName` parameter of JSON script `assign` commands. The `functionName` value is interpolated directly into dynamically generated JavaScript source code via string concatenation. The generated code is then executed in a forked Node.js child process. Version 7.1.9 contains a patch.3h CVE-2026-659068.8 ALT

———In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible7h CVE-2026-648158.1 ALT

——0In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files7h CVE-2026-648037.8 ALT

——0In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK7h CVE-2026-648027.8 ALT

——0In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration7h CVE-2026-595439.9 CRÍ

——0Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.7h