IntelliJ IDEA
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.2 to before 2026.2.4 | affected | semver |
| 2026.1 to before 2026.1.5.1 | affected | semver |
| 0 to before 2025.3.6.2 | affected | semver |
Threat intelligence dashboard
CVE-2026-118696high
Vulnerability record
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates
Risk score
8.0
CVSS 3.1
- Vendor
- JetBrains
- Product
- IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand, Rider, CLion, DataGrip, RustRover, DataSpell
- CWE
- CWE-299
- Published
- Oct 30, 2026
- Updated
- Oct 31, 2026
- CISA KEV
- Not flagged
Affected products and versions
PyCharm
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.2 to before 2026.2.4 | affected | semver |
| 2026.1 to before 2026.1.5.1 | affected | semver |
| 0 to before 2025.3.6.2 | affected | semver |
PhpStorm
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.2 to before 2026.2.4 | affected | semver |
| 2026.1 to before 2026.1.5.1 | affected | semver |
| 0 to before 2025.3.6.2 | affected | semver |
RubyMine
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.2 to before 2026.2.4 | affected | semver |
| 2026.1 to before 2026.1.5.1 | affected | semver |
| 0 to before 2025.3.6.2 | affected | semver |
WebStorm
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.2 to before 2026.2.4 | affected | semver |
| 2026.1 to before 2026.1.5.1 | affected | semver |
| 0 to before 2025.3.6.2 | affected | semver |
GoLand
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.2 to before 2026.2.4 | affected | semver |
| 2026.1 to before 2026.1.5.1 | affected | semver |
| 0 to before 2025.3.5.2 | affected | semver |
Rider
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.2 to before 2026.2.4 | affected | semver |
| 2026.1 to before 2026.1.5.3 | affected | semver |
| 0 to before 2025.3.5.3 | affected | semver |
CLion
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.2 to before 2026.2.4.1 | affected | semver |
| 2026.1 to before 2026.1.5.2 | affected | semver |
| 0 to before 2025.3.6.3 | affected | semver |
DataGrip
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.2 to before 2026.2.6.1 | affected | semver |
| 2026.1 to before 2026.1.4.1 | affected | semver |
| 0 to before 2025.3.6.1 | affected | semver |
RustRover
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.2 to before 2026.2.5 | affected | semver |
| 2026.1 to before 2026.1.4.1 | affected | semver |
| 0 to before 2025.3.7.1 | affected | semver |
DataSpell
JetBrains
| Version / range | Status | Type |
|---|---|---|
| 2026.1 to before 2026.1.3.1 | affected | semver |
| 0 to before 2025.3.3.1 | affected | semver |
Technical metrics
8.0
CVSS 3.1
- Severity
- high
- Source
- JetBrains
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N