Skip to content

Exploited: 178

LatestCVE-2026-107622 — BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter

7.8

CVE-2026-123293Verify fix

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting

JetBrains IntelliJ IDEA2026-11-06 10:27 UTC1 min readRead in

Summary

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting

Remediation

Inventory every JetBrains IntelliJ IDEA deployment, including staging.
No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

Referencehttps://www.jetbrains.com/privacy-security/issues-fixed/