Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2882▼ 181 respecto a la semana anterior
Críticas / altas1279▼ 60 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior
–

82 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaAlta (7.8)0.13%—Jetbrains Intellij Idea30/9/20262/10/2026
In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects
Pendiente de análisisBaja (3.3)0.15%—Jetbrains Intellij IdeaAI7/9/20268/9/2026
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace
Pendiente de análisisAlta (7.8)0.18%—Jetbrains Intellij IdeaAI7/9/20269/9/2026
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution
Pendiente de análisisBaja (3.3)0.14%—Jetbrains Intellij IdeaAI7/9/20268/9/2026
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching
Pendiente de análisisAlta (8.4)0.21%—Jetbrains Intellij IdeaAI7/9/20269/9/2026
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts
Pendiente de análisisBaja (2.8)0.39%—Jetbrains Intellij IdeaAI7/9/20268/9/2026
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log
AnalizadaMedia (5.5)0.15%—Jetbrains Intellij Idea17/8/202611/9/2026
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers
AnalizadaMedia (6.2)0.17%—Jetbrains Intellij Idea17/8/202611/9/2026
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
AnalizadaAlta (7.8)0.19%—Jetbrains Intellij Idea17/8/202611/9/2026
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
AnalizadaMedia (5.5)0.15%—Jetbrains Intellij Idea17/8/202611/9/2026
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE
AnalizadaMedia (6.3)0.15%—Jetbrains Intellij Idea17/8/202611/9/2026
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects
AnalizadaMedia (5.4)0.24%—Jetbrains Intellij Idea17/8/202611/9/2026
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint
AnalizadaMedia (4.4)0.18%—Jetbrains Intellij Idea17/8/20261/9/2026
In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects
AnalizadaCrítica (9.8)0.48%—Jetbrains Intellij Idea23/7/202628/7/2026
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files
AnalizadaAlta (8.6)0.39%—Jetbrains Intellij Idea23/7/202628/7/2026
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
AnalizadaCrítica (10)0.52%—Jetbrains Intellij Idea23/7/202628/7/2026
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
AnalizadaCrítica (10)0.48%—Jetbrains Intellij Idea23/7/202628/7/2026
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session
AnalizadaAlta (7.8)0.18%—Jetbrains Intellij Idea23/7/202628/7/2026
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration
AnalizadaMedia (6.1)0.25%—Jetbrains Intellij Idea23/7/202628/7/2026
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking
AnalizadaCrítica (9.8)0.60%—Jetbrains Intellij Idea10/7/202614/7/2026
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible
AnalizadaBaja (3.3)0.14%—Jetbrains Intellij Idea29/5/202622/7/2026
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
AnalizadaAlta (7.8)0.18%—Jetbrains Intellij Idea29/5/202622/7/2026
In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin
AnalizadaAlta (8.8)0.51%—Jetbrains Intellij Idea29/5/202622/7/2026
In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account
AnalizadaAlta (7.8)0.68%—Jetbrains Intellij Idea29/5/202622/7/2026
In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion
AnalizadaAlta (7.5)0.44%—Jetbrains Intellij Idea30/4/202617/6/2026
In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server