JetBrains
Number 38 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
545
Critical
24
High
123
Known Exploited
4
Exploit available
1
Network, no login needed
25.4%
Of 543 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 258 | 19 | 92 | 107 | 40 | 0 |
| 2025 | 83 | 0 | 16 | 54 | 13 | 0 |
| 2024 | 103 | 3 | 7 | 78 | 15 | 0 |
| 2023 | 54 | 2 | 3 | 43 | 5 | 1 |
| 2022 | 46 | 0 | 5 | 26 | 15 | 0 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2018 | 1 | 0 | 0 | 0 | 0 | 1 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| TeamCity | 191 | 32 |
| YouTrack | 141 | 36 |
| IntelliJ IDEA | 93 | 30 |
| Hub | 25 | 9 |
| Datalore | 19 | 7 |
| Ktor | 14 | 4 |
| Toolbox App | 10 | 3 |
| PyCharm | 7 | 3 |
| WebStorm | 7 | 5 |
| GoLand | 6 | 3 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Cross-Site Scripting | 105 | 11 |
| Missing Authorization | 50 | 15 |
| Incorrect Authorization | 46 | 13 |
| Authentication Issues | 23 | 15 |
| Information Disclosure | 23 | 0 |
| Server-Side Request Forgery | 13 | 1 |
| Code Injection | 12 | 5 |
| Credential Exposure | 12 | 2 |
| Insecure Direct Object Reference | 11 | 2 |
| Command Injection | 10 | 7 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-63077 | JetBrains TeamCity: Insecure Deserialization | Critical | 94.9% | |
| CVE-2024-27199 | JetBrains TeamCity vulnerability | High | 100.0% | |
| CVE-2024-27198 | JetBrains TeamCity: Authentication Issues | Critical | 99.9% | |
| CVE-2023-42793 | JetBrains TeamCity: Authentication Issues | Critical | 100.0% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-123858 | JetBrains PhpStorm vulnerability | Medium | 0.1% | |
| CVE-2026-123857 | JetBrains PhpStorm: XML External Entity | Medium | 0.3% | |
| CVE-2026-123856 | JetBrains Toolbox App: Credential Exposure | Medium | 0.3% | |
| CVE-2026-123855 | JetBrains Toolbox App: Command Injection | High | 0.7% | |
| CVE-2026-123854 | JetBrains PyCharm vulnerability | Medium | 0.2% | |
| CVE-2026-123853 | JetBrains IntelliJ IDEA vulnerability | High | 0.2% | |
| CVE-2026-123852 | JetBrains Junie GitHub Action: Incorrect Authorization | High | 0.4% | |
| CVE-2026-123851 | JetBrains Junie GitHub Action vulnerability | Medium | 0.2% | |
| CVE-2026-123850 | JetBrains YouTrack vulnerability | Low | 0.2% | |
| CVE-2026-123849 | JetBrains IntelliJ IDEA vulnerability | High | 0.1% |