PULSEUnderground Intel

AO VIVO18sinais / 24h

FEED

ransomdirewolf reclama a Algonomy · US · Technologyransomobsoft reclama a Company #6ransomakira reclama a Hudson & Hudson SignProducts · US · Manufacturingransomshiba reclama a Istituto Borgo · IT · Otherransomakira reclama a Boyle, Pecharich, Cline, Whittington andStallings · Professional Servicesransomn0n reclama a Dompé Farmaceutici S.p.A. · IT · Healthcareransomn0n reclama a Cogent Biosciences, Inc. · US · Healthcareransomn0n reclama a Chartboost LLC · US · Technologyransomn0n reclama a Centrepoint · SA · Energy & Utilitiesransomn0n reclama a Resource Consultants · US · Professional Servicesransomqilin reclama a Rotstein & Shiffman · IL · Professional Servicesransomn0n reclama a Max Fashion · AE · Retail & E-Commerceransomn0n reclama a Hallmark Cards, Inc. · US · Retail & E-Commerceransomn0n reclama a Scry Analytics · US · Technologyransomdirewolf reclama a Algonomy · US · Technologyransomobsoft reclama a Company #6ransomakira reclama a Hudson & Hudson SignProducts · US · Manufacturingransomshiba reclama a Istituto Borgo · IT · Otherransomakira reclama a Boyle, Pecharich, Cline, Whittington andStallings · Professional Servicesransomn0n reclama a Dompé Farmaceutici S.p.A. · IT · Healthcareransomn0n reclama a Cogent Biosciences, Inc. · US · Healthcareransomn0n reclama a Chartboost LLC · US · Technologyransomn0n reclama a Centrepoint · SA · Energy & Utilitiesransomn0n reclama a Resource Consultants · US · Professional Servicesransomqilin reclama a Rotstein & Shiffman · IL · Professional Servicesransomn0n reclama a Max Fashion · AE · Retail & E-Commerceransomn0n reclama a Hallmark Cards, Inc. · US · Retail & E-Commerceransomn0n reclama a Scry Analytics · US · Technology

← Todos os CVEs

CVE Watch6 de nov. de 2026

CVE-2026-123304

In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path

CVSS

7.8

Alta

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 6 de nov. de 2026 · Última mod.: 6 de nov. de 2026 · CWE-829

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path

Referências oficiais

www.jetbrains.comhttps://www.jetbrains.com/privacy-security/issues-fixed/

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1233257.1 ALT

———In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page7h CVE-2026-1233226.3 MÉD

———In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader7h CVE-2026-1233217.8 ALT

———In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects7h CVE-2026-1233133.3 BAI

———In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settings7h CVE-2026-1233086.3 MÉD

———In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects7h CVE-2026-1233027.8 ALT

———In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery7h