CVE-2026-86502Patch

LOWCVSS 8.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://www.jetbrains.com/privacy-security/issues-fixed/

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-09-08); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Patch

150.0%

Disclosure

150.0%

Referenced assets1 URL

By indicator

https://www.cert.gov.py/vulnerabilidades-en-productos-jetbrains-4/

Classification over time

Date	Total	Labels

2026-09-08	1	Patch1
2026-09-09	1	Disclosure1

Full discourse2 posts

Rıdvan Yağlı@ridvanyagli46d
Patch
🚨 JetBrains ürünlerinde 6 yeni güvenlik açığı: 2 kritik CVSS 9.8 JetBrains; YouTrack, Hub, IntelliJ IDEA ve GoLand ürünlerini etkileyen 6 güvenlik açığını giderdi. CVE-2026-86478 — CVSS 9.8 YouTrack Helpdesk'te hatalı kimlik doğrulama nedeniyle kimlik doğrulama gerektirmeden hesap ele geçirme mümkün. CVE-2026-86480 — CVSS 9.8 JetBrains Hub'da kimlik doğrulama olmadan trusted service kaydedilerek Superuser yetkisi elde edilebiliyor. Diğer açıklar: • CVE-2026-86502 — CVSS 8.4 — IntelliJ IDEA • CVE-2026-86479 — CVSS 8.1 — YouTrack • CVE-2026-86504 — CVSS 7.8 — IntelliJ IDEA • CVE-2026-86506 — CVSS 5.9 — GoLand ⚠️ Şu an için bu 6 açığın aktif olarak istismar edildiğine dair doğrulanmış bilgi yok. YouTrack, Hub, IntelliJ IDEA veya GoLand kullanıyorsanız, etkilenen sürümleri kontrol edip güvenlik güncellemelerini uygulayın.
Post summary
JetBrains disclosed six high‑severity CVEs affecting multiple products and advised users to apply updates; no active exploitation reported and no PoC or exploit details were shared.
00041560
2.4K followersView on X
CERT-PY@CERTpy44d
Disclosure
⚠️ Vulnerabilidades en productos JetBrains ❗ CVE-2026-86502 ❗ CVE-2026-86482 ❗ CVE-2026-86480 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-jetbrains-4/ https://t.co/BXcZBkPHsX
Post summary
The text announces three JetBrains product CVEs (CVE‑2026‑86502, CVE‑2026‑86482, CVE‑2026‑86480) and provides links for additional information, serving as a formal disclosure.
02020235
6.7K followersView on X

Explore more

Back to dashboard