VulnSocial

CVE-2026-64805Disclosure(jetbrains / webstorm)

LOWCVSS 8.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch jetbrains webstorm systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling

jetbrains CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-829

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • webstorm

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
jetbrains
Products
webstorm

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-23: 1Patch / Workaround · 2026-07-23: 1Technical Details · 2026-07-23: 107-23
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    #CVE-2026-64805 – Code execution in #JetBrains #WebStorm before 2026.2 via project-local package-manager tooling before trust is granted. #CVSS 8.4. No patch yet – limit project access. #CVEAlert #JetBrains #infosec #sysadmin #devops #developer #git #github #gitlab https://www.valtersit.com/cve/CVE-2026-64805/

    Post summary

    The post announces a new code‑execution vulnerability in JetBrains WebStorm, provides technical details and a CVSS score, and advises limiting project access until a patch is released.

    0001058
    989 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appjetbrainswebstorm---

Explore more

Back to dashboardjetbrains CVEswebstorm vulnerabilities