CVE-2026-25848Disclosure(jetbrains / hub)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch jetbrains hub systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible

jetbrains CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.jetbrains.com/privacy-security/issues-fixed/

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

Threat summary

Patch or workaround signal is available
7 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 7 signals
Disclosure: 6 classified signals
Peaked 1d ago at 5 mentions (2026-02-09); latest day: 2
7 total mentions across 2 days

Affected systems

Vendors

jetbrains

Products

hub

Deep dive

Activity timeline7 mentions / 2d

Signal classification2 categories

Disclosure

685.7%

Patch

114.3%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-09	5	Disclosure4Patch1
2026-02-20	2	Disclosure2

Full discourse7 posts

CVE@CVEnew241d
Disclosure
CVE-2026-25848 In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible https://www.cve.org/CVERecord?id=CVE-2026-25848
Post summary
An authentication bypass vulnerability (CVE-2026-25848) in JetBrains Hub prior to 2025.3.119807 allows unauthorized administrative actions.
00010276
56.5K followersView on X
The Hacker Wire@TheHackerWire241d
Disclosure
🔴 CVE-2026-25848 - Critical In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible https://www.thehackerwire.com/vulnerability/CVE-2026-25848/ https://t.co/NTSZBg1P5B
Post summary
JetBrains Hub users before version 2025.3.119807 are at risk of an authentication bypass that could allow administrative actions. No PoC, exploit code, or patch details are provided in the statement.
0001087
112 followersView on X
サイバーセキュリティニュース-JP@cybersecnews_jp230d
Disclosure
JetBrains「Hub」で認証バイパスの重大な脆弱性(CVE-2026-25848)-管理者操作が不正実行される恐れ https://rocket-boys.co.jp/security-measures-lab/jetbrains-hub-critical-authentication-bypass-vulnerability-cve-2026-25848/
Post summary
The article announces a critical authentication bypass flaw (CVE-2026-25848) in JetBrains Hub that could allow unauthorized execution of administrative actions.
0000057
45 followersView on X
セキュリティ対策Lab@securityLab_jp230d
Disclosure
JetBrains「Hub」で認証バイパスの重大な脆弱性(CVE-2026-25848)-管理者操作が不正実行される恐れ https://rocket-boys.co.jp/security-measures-lab/jetbrains-hub-critical-authentication-bypass-vulnerability-cve-2026-25848/ #セキュリティ対策Lab #セキュリティ #Security #CybersecurityNews
Post summary
JetBrains Hub has a critical authentication bypass vulnerability (CVE‑2026‑25848) that could enable unauthorized administrative operations; further information is available at the provided link.
0000087
312 followersView on X
Säkerhetsbloggen@Sakerhetsblogg240d
Patch
CVE-2026-25848 i JetBrains Hub möjliggör autentisering bypass som ger angripare administrativa rättigheter. Uppdatera till senaste versionen för att skydda din data! #säkerhet #cybersäkerhet #CVE
Post summary
The post reveals CVE-2026-25848 as an authentication bypass in JetBrains Hub that grants admin rights, and urges users to update to the latest version for protection.
0000043
7 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds241d
Disclosure
CVE-2026-25848 Authentication Bypass Allowing Administrative Actions in ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25848 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet announces the disclosure of CVE-2026-25848, an authentication bypass vulnerability that allows administrative actions, but provides no evidence of PoC, active exploitation, or patch availability.
0000054
4.0K followersView on X
CVEFind.com@CveFindCom241d
Disclosure
[CVE-2026-25848: CRITICAL] In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible#cve,CVE-2026-25848,#cybersecurity https://cvefind.com/CVE-2026-25848
Post summary
The tweet announces a critical authentication bypass in JetBrains Hub (pre‑2025.3.119807) that could allow administrative actions, but does not provide a PoC, exploit code, patch, or evidence of active exploitation.
0000076
583 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	jetbrains	hub	-	-	-

Explore more

Back to dashboard jetbrains CVEs hub vulnerabilities

What researchers are saying

CVE-2026-25848

セキュリティ対策Lab[verified]@securityLab_jpDisclosure

JetBrains Hub has a critical authentication bypass vulnerability (CVE‑2026‑25848) that could enable unauthorized administrative operations; further information is available at the provided link.

CVE@CVEnewDisclosure

An authentication bypass vulnerability (CVE-2026-25848) in JetBrains Hub prior to 2025.3.119807 allows unauthorized administrative actions.

The Hacker Wire@TheHackerWireDisclosure

JetBrains Hub users before version 2025.3.119807 are at risk of an authentication bypass that could allow administrative actions. No PoC, exploit code, or patch details are provided in the statement.

サイバーセキュリティニュース-JP@cybersecnews_jpDisclosure

The article announces a critical authentication bypass flaw (CVE-2026-25848) in JetBrains Hub that could allow unauthorized execution of administrative actions.

Säkerhetsbloggen@SakerhetsbloggPatch

The post reveals CVE-2026-25848 as an authentication bypass in JetBrains Hub that grants admin rights, and urges users to update to the latest version for protection.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The tweet announces the disclosure of CVE-2026-25848, an authentication bypass vulnerability that allows administrative actions, but provides no evidence of PoC, active exploitation, or patch availability.

CVEFind.com@CveFindComDisclosure

The tweet announces a critical authentication bypass in JetBrains Hub (pre‑2025.3.119807) that could allow administrative actions, but does not provide a PoC, exploit code, patch, or evidence of active exploitation.