CVE-2026-123306

EUVD-2026-118070
In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runs
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
JetBrainsCNA
7.4 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
jetbrainsintellij_idea
𝑥
< 2026.3
CNA
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://www.jetbrains.com/privacy-security/issues-fixed/