CVE Catalog
CVE-2026-75058
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.12%
2th percentile - higher than 2% of all known CVEs
Summary
In JetBrains IntelliJ IDEA before 2026.2.1 XXE was possible in the Eclipse settings importers.
Risk Assessment
An attacker could exploit XXE to read local files or perform SSRF attacks, potentially leading to disclosure of sensitive data in the development environment.
Recommendation
It is recommended to upgrade IntelliJ IDEA to version 2026.2.1 or later to fix the XXE vulnerability.
Original NVD description (English source)
In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers