DMZ//THREAT INTEL
FEED ACTIVELAST SYNC: 05:07:52ZSOURCES: 14CRITICAL: 34
⚠ ACTIVE ALERTS
@AlvieriD CRITICAL — CORRELATED | Actor '888' listing on PwnForums: claims 35GB of Accenture source code,… /// @DarkWebInformer CRITICAL — CORRELATED | Prinz Eugen ransomware operation — actor ROOTBOY (aka avtokz / GERMANIA)… /// @MalwareHunterTeam CRITICAL — CORRELATED | PolinRider (DPRK / Famous Chollima / Contagious Interview) supply chain… /// @GossiTheDog CRITICAL — CORRELATED | CVE-2026-8037 Progress Kemp LoadMaster pre-auth RCE — exploitation attempts… /// @FalconFeedsio CRITICAL — CORRELATED | Tracking '888' forum listing for Accenture data (July 6, 2026). Dataset:…
34Critical Threats
19Active CVEs
10IOCs Tracked
7New Advisories
INTEL FEED/CVE TRACKER/CVE-2026-59792
TLP:WHITEVULNERABILITY BRIEF // CVE-2026-59792PUBLISHED: 2026-07-10
■ CRITICALCVE-2026-59792

JetBrains IntelliJ IDEA Path Traversal Code Execution via Project Workspace ID

VENDOR: JetBrains//PRODUCT: IntelliJ IDEA
9.6
CRITICAL
CVSS 3.1
✓
PATCH STATUS
PATCH AVAILABLE
◯
EXPLOIT STATUS
NO KNOWN EXPLOIT

VULNERABILITY OVERVIEW

A path traversal vulnerability in IntelliJ IDEA's project workspace ID handling allows remote code execution; the scope-changed CVSS vector (S:C) reflects that a malicious repository or project file could trigger execution on an unsuspecting developer's machine when opened. Published July 10, 2026, as part of a JetBrains advisory batch that also disclosed file access and XSS issues in TeamCity (CVE-2026-59793/CVE-2026-59794) and YouTrack (CVE-2026-59791/CVE-2026-61492). No public exploit or in-the-wild exploitation has been observed; patch to 2026.1.4 or upgrade to the 2026.2 branch.

CVSS BREAKDOWN

↗
Attack Vector
NETWORK
△
Attack Complexity
LOW
⚷
Privs Required
NONE
◈
User Interaction
REQUIRED
⊕
Scope / Impact
CHANGED
C:H · I:H · A:L
AFFECTED VERSIONSIntelliJ IDEA prior to 2026.1.4 and prior to 2026.2

CITATIONS

  • → https://nvd.nist.gov/vuln/detail/CVE-2026-59792
  • → https://www.jetbrains.com/privacy-security/issues-fixed/
  • → https://cve.threatint.eu/CVE/CVE-2026-59792
SHARE BRIEF:✕ Post on Xin Share on LinkedIn