CVE-2026-56141CWE-338

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes…

Critical · published June 19, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

In JetBrains Hub before 2026.1.13757,

2025.3.148033,

2025.2.148048,

2025.1.148120,

2024.3.148430,

2024.2.148429 account takeover via predictable restore codes was possible

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00522 · 43.5th percentile
Weakness
CWE-338 · Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Published
2026-06-19T11:49Z
EPSS history
Timeline
  • 19 JUN 11:49Z
    In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes…
    cvelistv5