Threat intelligence dashboard
CVE-2026-118697critical

Vulnerability record

In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates

Risk score

9.0

CVSS 3.1

Vendor
JetBrains
Product
Toolbox App, IntelliJ IDEA
CWE
CWE-295
Published
Oct 30, 2026
Updated
Oct 31, 2026
CISA KEV
Not flagged

Affected products and versions

Toolbox App

JetBrains

Version / rangeStatusType
3.9.0 to before 3.9.1affectedsemver
0 to before 3.8.2affectedsemver

IntelliJ IDEA

JetBrains

Version / rangeStatusType
0 to before 2026.2.4affectedsemver

Technical metrics

9.0

CVSS 3.1

Severity
critical
Source
JetBrains
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H