VulnSocial

CVE-2026-49367Disclosure(jetbrains / intellij_idea)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account

jetbrains CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • intellij_idea

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-05-29); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
jetbrains
Products
intellij_idea

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-29: 1Mentions · 2026-06-10: 1Technical Details · 2026-05-29: 105-2906-10
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos JetBrains ❗ CVE-2026-49368 ❗ CVE-2026-49367 ❗ CVE-2026-49366 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-jetbrains/ https://t.co/Azn3MRuYcn

    Post summary

    The tweet announces three CVE identifiers for JetBrains products and directs readers to a CERT page for more details, but it lacks any technical specifics, PoC, or exploit information.

    0000082
    6.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-49367 In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account https://www.cve.org/CVERecord?id=CVE-2026-49367

    Post summary

    CVE‑2026‑49367 exposes JetBrains IntelliJ IDEA (before 2026.1.1) to command execution through the guest user account.

    00000246
    57.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appjetbrainsintellij_idea---

Explore more

Back to dashboardjetbrains CVEsintellij_idea vulnerabilities