CVE-2026-1232958.1High
CVE-2026-123295: JetBrains Hub vulnerability
JetBrains · Hub
Fixed in 2026.2.52519 · Affected: JetBrains Hub before 2026.2.52519 · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.04 (4 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
No EPSS score yet. The score appears once FIRST publishes it.
8.1HighCVSS
LowMediumHighCrit.
DescriptionNVD
In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 6 Nov.
- JetBrains patches 61 flaws across developer toolsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.