CVE Watch6 de nov. de 2026

CVE-2026-123302

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script e

CVSS

7.8

Alta

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 6 de nov. de 2026 · Última mod.: 6 de nov. de 2026 · CWE-829

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery

Referências oficiais

www.jetbrains.comhttps://www.jetbrains.com/privacy-security/issues-fixed/

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1233257.1 ALT

—

———In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page8h CVE-2026-1233226.3 MÉD

—

———In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader8h CVE-2026-1233217.8 ALT

—

———In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects8h CVE-2026-1233133.3 BAI

—

———In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settings8h CVE-2026-1233086.3 MÉD

—

———In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects8h CVE-2026-1233047.8 ALT

—

———In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path8h