🚨 CVE-2026-123298
In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible