{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2026-123855/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2026-123855/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2026-123855/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2026-123855/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2026-123855/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2026-123855"},"sightings":{"href":"/api/v1/sightings/cve-2026-123855"}},"data":{"vulnerability-lookup:meta":{"nvd":"{\"cve\":{\"id\":\"CVE-2026-123855\",\"sourceIdentifier\":\"cve@jetbrains.com\",\"published\":\"2026-11-06T17:17:24.727\",\"lastModified\":\"2026-11-06T20:20:05.730\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs\"}],\"affected\":[{\"source\":\"cve@jetbrains.com\",\"affectedData\":[{\"vendor\":\"JetBrains\",\"product\":\"Toolbox App\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"versions\":[{\"version\":\"0\",\"lessThan\":\"3.6.1\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"cve@jetbrains.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.6,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-11-06T16:42:26.374482Z\",\"id\":\"CVE-2026-123855\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"cve@jetbrains.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]}],\"references\":[{\"url\":\"https://www.jetbrains.com/privacy-security/issues-fixed/\",\"source\":\"cve@jetbrains.com\"}]}}"}},"source":"gcve-enriched","vuln_id":"cve-2026-123855"}