CVE-2026-25847: Jetbrains Pycharm

What is CVE-2026-25847?

In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible

CVSS6.1 NVD 3.1

SeverityMEDIUM

ExploitationNo exploitation reported

EPSS<1% · P11

Triage statusNo Known Exploit

ActionSchedule for next cycle

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD published2026-02-09

NVD last modified2026-06-17

Timeline

2026-02-09Published to the U.S. National Vulnerability Database (NVD)
2026-06-17NVD record last updated

Affected product

Jetbrains Pycharm

Remediation Steps

Identify 9-year-old Linux vulnerability now re-discovered through AI-assisted scanning
Update all Linux systems to versions containing fixes for the discovered flaw
Leverage available proof-of-concept exploit code to test your patching effectiveness
Implement continuous security scanning with AI-assisted tools to identify legacy flaws
Document and track patching of previously overlooked vulnerabilities in legacy systems

References

Referenced in our briefings & reports

Vulnerability Priority Report – Week 1 of May 2026 (May 4 – 10)
Vulnerability Priority Report – Week 1 of April 2026 (April 6 – 12)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.