| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2026-100256 | 7.8 HIGH | PATCH UNDER REVIEW | 0.13% | 2026-09-30 |
| CVE-2026-100263 | 4.7 MEDIUM | UNKNOWN / UNPATCHED | 0.19% | 2026-09-30 |
| CVE-2026-75060 PoC | 8.4 HIGH | PATCH UNDER REVIEW | 0.18% | 2026-08-17 |
| CVE-2026-75054 | 6.3 MEDIUM | PATCH UNDER REVIEW | 0.12% | 2026-08-17 |
| CVE-2026-75050 PoC | 7.1 HIGH | PATCH UNDER REVIEW | 1.06% | 2026-08-17 |
| CVE-2026-75048 | 8.2 HIGH | PATCH UNDER REVIEW | 0.32% | 2026-08-17 |
| CVE-2026-75059 PoC | 4.4 MEDIUM | UNKNOWN / UNPATCHED | 0.14% | 2026-08-17 |
| CVE-2026-75047 | 6.5 MEDIUM | UNKNOWN / UNPATCHED | 0.88% | 2026-08-17 |
| CVE-2026-75049 PoC | 6.5 MEDIUM | UNKNOWN / UNPATCHED | 0.26% | 2026-08-17 |
| CVE-2026-75045 | 9.1 CRITICAL | PATCH UNDER REVIEW | 0.30% | 2026-08-17 |
| CVE-2026-75046 | 4.3 MEDIUM | UNKNOWN / UNPATCHED | 0.21% | 2026-08-17 |
| CVE-2026-75056 PoC | 7.8 HIGH | PATCHED / FIX AVAILABLE | 0.19% | 2026-08-17 |
| CVE-2026-75053 | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.18% | 2026-08-17 |
| CVE-2026-75052 PoC | 3.6 LOW | PATCH UNDER REVIEW | 0.13% | 2026-08-17 |
| CVE-2026-75057 | 6.2 MEDIUM | PATCH UNDER REVIEW | 0.13% | 2026-08-17 |
| CVE-2026-75044 | 8.1 HIGH | PATCH UNDER REVIEW | 0.38% | 2026-08-17 |
| CVE-2026-75055 PoC | 5.5 MEDIUM | PATCH UNDER REVIEW | 0.12% | 2026-08-17 |
| CVE-2026-75051 | 8.1 HIGH | PATCH UNDER REVIEW | 0.35% | 2026-08-17 |
| CVE-2026-75058 PoC | 5.5 MEDIUM | PATCH UNDER REVIEW | 0.12% | 2026-08-17 |
| CVE-2026-63077 KEV PoC | 9.8 CRITICAL | PATCH UNDER REVIEW | 89.57% | 2026-07-27 |
JetBrains is a software development tools company known for its integrated development environments (IDEs) such as IntelliJ IDEA, PyCharm, and ReSharper, as well as the Kotlin programming language. Its products are widely used in enterprise and open-source development, making it a significant target for supply chain attacks, as seen in the 2020 SolarWinds-related compromise of its TeamCity CI/CD server. The company's cybersecurity relevance stems from its role in the software supply chain and the critical nature of its tools for developers.
Based on 5 critical CVEs, 1 CISA KEV, 2% unpatched. Model: GDPR Art.83 · not legal advice.