CVE-2026-123294

EUVD-2026-118059
In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
JetBrainsCNA
9.6 CRITICAL
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
jetbrainshub
𝑥
< 2026.2.52556
CNA
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://www.jetbrains.com/privacy-security/issues-fixed/