Critical Vulnerabilities in JetBrains IntelliJ IDEA and TeamCity Enable Remote Code Execution
JetBrains has released urgent security updates for IntelliJ IDEA and TeamCity to address several critical vulnerabilities that threaten remote development environments. The flaws could enable attackers to execute arbitrary code, modify build pipelines, and gain unauthorized access to files, making prompt patching essential for organizations using shared development setups.
In IntelliJ IDEA, the vulnerability tracked as CVE-2026-59792 stems from a directory traversal issue in the processing of workspace identifiers. This weakness may lead to remote code execution and received a maximum CVSS score of 9.8. The company has resolved the problem in versions 2026.1.4 and 2026.2.
TeamCity received multiple fixes addressing high-risk issues. CVE-2026-65907 allows code execution through specially crafted malicious Git repository configurations. Separately, CVE-2026-65906 permits attackers to escape the sandbox that protects Kotlin DSL scripts, potentially granting broader system access.
Additional vulnerabilities corrected in TeamCity include CVE-2026-59793, which enables arbitrary file access via the Perforce integration, and CVE-2026-59794, a persistent cross-site scripting flaw on the cloud profiles page. Both issues could be leveraged to compromise sensitive data or user sessions.
Administrators are strongly advised to apply the updates without delay. IntelliJ IDEA users should upgrade to the corrected releases, while TeamCity deployments should move to version 2026.1.2 or 2025.11.6 according to their current release line.
Related articles
Critical Vulnerabilities Patched in OpenAM with Release of Version 16.1.2
Multiple serious vulnerabilities have been disclosed in OpenAM, including remote code execution flaws that require no authentication. The Open Identity Platform development team released OpenAM 16.1.2 on July 20, 2026, addressing a total of 18 issues that encompass both native vulnerabilities and those in third-party dependencies. CVE-2026-62379 allows arbitrary Java classes specified in XML to be loaded and instantiated without validation, enabling unauthenticated remote code execution. CVE-2026-62263 stems from improper deserialization filtering in Java, similarly permitting unauthenticated code execution. The update also resolves an XSS vulnerability (CVE-2026-62280) on the authorization consent page and fixes issues in components such as Node.js, js-yaml, and websocket-driver. CVSS scores rate the two primary flaws as critical at 9.8 and 9.2 respectively.
Cisco, Eltex, and MikroTik Switches Tested Against 90 DHCP Spoofing Attacks
Researchers conducted a detailed comparison of three popular network switches to evaluate their effectiveness in blocking DHCP spoofing attacks, a common Layer 2 threat that can compromise data in local networks. The tested devices included the Cisco 2960 with hardware-based protections, the Russian Eltex MES1428 also featuring ASIC-implemented security, and the more affordable MikroTik CRS that relies on CPU-processed Bridge Filter rules. Using a legitimate ALT Linux DHCP server, a Kali Linux attacker running a custom Scapy Python script, and a victim machine, the team launched 30 attacks per device with protections enabled. Results showed Cisco blocking 100% of attacks with the fastest detection times around 415 ms and minimal CPU impact, while Eltex achieved 93.3% effectiveness and MikroTik only 80% with significantly higher latency and processor load. The study highlights hardware versus software implementation differences and provides recommendations for critical infrastructure versus small office environments.
Check Point Issues Urgent Fixes for Critical Exploited SmartConsole Vulnerability CVE-2026-16232
Check Point has released emergency patches for a critical vulnerability in the SmartConsole login process that is already being actively exploited in real-world attacks. The flaw, tracked as CVE-2026-16232 with a CVSS score of 9.3, allows unauthenticated remote attackers to obtain valid access tokens and gain full administrative privileges over the management environment. Exploitation requires the management server to be directly exposed to the internet without IP address restrictions for trusted clients. The company has confirmed attacks against a small number of customers and notified those affected. The update also addresses two additional vulnerabilities, CVE-2026-62144 and CVE-2026-62145, and is delivered through the Jumbo Hotfix package released on July 22, 2026.
Google Releases Fifth Chrome Security Update in July, Addressing Four High-Severity Vulnerabilities
Google has issued the fifth security update for its Chrome browser in July 2026, releasing patches for four high-severity vulnerabilities. The update, published on July 23, 2026, includes versions Chrome 150.0.7871.187 and 150.0.7871.186 for Windows and macOS, along with Chrome 150.0.7871.186 for Linux. This follows previous July updates that fixed 27 issues on July 8, 15 on July 14, 7 on July 16, and 12 on July 21. The four newly addressed flaws, reported between late May and mid-June, all carry a High severity rating. They include an out-of-bounds write vulnerability in the codec component tracked as CVE-2026-16807, plus three Use After Free issues in WebMCP (CVE-2026-16806), the Blink rendering engine (CVE-2026-16805), and input processing (CVE-2026-16804).