CVE-2026-64813

Published Jul 23, 2026 CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Description
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Unauthorized Settings Modification via Remote Development Session
Type Values Removed Values Added
Title Unauthorized Settings Modification via Remote Development Session
Type Values Removed Values Added
First Time appeared Jetbrains
Jetbrains intellij Idea
Vendors & Products Jetbrains
Jetbrains intellij Idea
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
Weaknesses CWE-602
References
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
JetBrains
Published
Updated
Jul 24, 2026, 3:56 AM
Reserved
Jul 20, 2026, 6:20 PM
Status
Analyzed
Published
Jul 23, 2026, 12:18 PM
Modified
Oct 24, 2026, 1:10 PM