CVE-2026-5024210.0CriticalCWE-306

CVE-2026-50242: JetBrains Hub vulnerability

JetBrains · Hub

Fixed in 2026.1.13757 · Affected: JetBrains Hub before 2026.1.13757 · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

0.6%probability of exploitation in the next 30 days

49th percentile

050100

Higher than 49% of scored CVEs

10.0CriticalCVSS 3.1

LowMediumHighCrit.

DescriptionNVD

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Missing Authentication · Authentication
Vendor: JetBrains
Published: June 2026
Band: Unlikely (under 1%), June 2026

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 2 Jul.

2 Jul 01:22
JetBrains Patches CVSS 10 Authentication Bypass Affecting 15 Million Developers
SecurityOnline · first in our coverage

New articles also arrive in the RSS feed.