CVE-2026-111091
In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration
CVSS
7.8
Alta
EPSS
0.1%
p3
KEV
—
Exploit Today
1
0-100
Publicado: 15 de out. de 2026 · Última mod.: 15 de out. de 2026 · CWE-829
0.1%EPSS · 30 dias0.1%
2026-10-162026-11-06
In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1238584.4 MÉD—
——0In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects14hCVE-2026-1238545.5 MÉD—
——0In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module5hCVE-2026-1238537.8 ALT—
——0In JetBrains IntelliJ IDEA before 2026.3,
2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process5hCVE-2026-1238497.0 ALT—
——0In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers5hCVE-2026-1238433.3 BAI—
——0In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration14hCVE-2026-1238387.8 ALT—
——0In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file5h