Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-49384 In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible https://www.cve.org/CVERecord?id=CVE-2026-49384
Post summary
The notice announces that a stored XSS vulnerability (CVE-2026-49384) existed in JetBrains PyCharm versions prior to 2025.3.4, affecting Jupyter notebook Markdown cells.
#jetbrains #CVE https://www.valtersit.com/cve/CVE-2026-49384/ #cvealert POC, Sigma, Yara rules available. Hope @jetbrains will patch it quickly and we will have Green fix in the database #CyberSec #cybersecurity #infosec #infosecurity #DevOps #Sysadmin #Developers
Post summary
A proof of concept for CVE‑2026‑49384 is publicly available, but there is no evidence of exploitation, patch release, or technical details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jetbrains | pycharm | - | - | - |