In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.jetbrains.com/privacy-security/issues-fixed/ |
|
History
Thu, 23 Jul 2026 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Jetbrains
Jetbrains intellij Idea |
|
| Vendors & Products |
Jetbrains
Jetbrains intellij Idea |
Thu, 23 Jul 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 23 Jul 2026 12:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files | |
| Weaknesses | CWE-94 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: JetBrains
Published:
Updated: 2026-07-23T13:20:26.601Z
Reserved: 2026-07-20T18:20:31.114Z
Link: CVE-2026-64815
Updated: 2026-07-23T13:20:22.719Z
No data.
No data.
OpenCVE Enrichment
Updated: 2026-07-23T16:00:14Z
Weaknesses