News & Sicurezza

CVE ID :CVE-2026-86506 Published : Sept. 7, 2026, 5:17 p.m. | 6 hours, 12 minutes ago Description :In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data Severity: 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86498 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86499 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86500 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86501 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log Severity: 2.8 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86502 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts Severity: 8.4 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86503 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching Severity: 3.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86497 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials Severity: 6.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86504 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86489 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86493 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86495 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...