CVE-2026-86506: JetBrains Goland

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data

Affected products

• JetBrains Goland: before 2026.2.2.1 (fixed in 2026.2.2.1)

Published 2026-09-07. Last modified 2026-09-08.