CVE-2026-49383 LOW

CVE-2026-49383

Vendor Jetbrains
Product IntelliJ IDEA
Weakness CWE-611 · XXE
Published May 29, 2026
Last update May 29, 2026

CVSS base score

3.3/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible

Key dates

02Disclosure timeline

May 29, 2026 CVE published
May 29, 2026 Record updated