← All advisories

Medium severity4.3OSV Advisory· Published Jul 23, 2026· Updated Jul 28, 2026

CVE-2026-64810

CVE-2026-64810

Description

In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking

Affected products

3

Jetbrains/Intellij Idea2 versions
cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*range: <2026.2
- (no CPE)range: <2026.2
Jetbrains/Intellij CommunityOSV
Range: idea/262.8665.258, idea/2026.2, pycharm/262.8665.186, …

Patches

Vulnerability mechanics

References

1

www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.