CVE Catalog
CVE-2026-75053
MediumCVSS 5.4Summary
In JetBrains IntelliJ IDEA before 2026.2.1, a Server-Side Request Forgery (SSRF) was possible via the DevKit debug listener endpoint.
Risk Assessment
An attacker could exploit SSRF to send requests to internal network resources, potentially leading to unauthorized access to data or services.
Recommendation
Update IntelliJ IDEA to version 2026.2.1 or later to remediate the vulnerability.
Original NVD description (English source)
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint