CVE-2026-118696
CVSS Score
8.0
EPSS Score
0.0%
EPSS Percentile
0th
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates
| CWE | CWE-299 |
| Vendor | jetbrains |
| Product | intellij idea |
| Published | Oct 30, 2026 |
| Last Updated | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for jetbrains intellij idea
Be the first to know when new high vulnerabilities affecting jetbrains intellij idea are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
JetBrains / IntelliJ IDEA
2026.2 < 2026.2.4 2026.1 < 2026.1.5.1 0 < 2025.3.6.2
JetBrains / PyCharm
2026.2 < 2026.2.4 2026.1 < 2026.1.5.1 0 < 2025.3.6.2
JetBrains / PhpStorm
2026.2 < 2026.2.4 2026.1 < 2026.1.5.1 0 < 2025.3.6.2
JetBrains / RubyMine
2026.2 < 2026.2.4 2026.1 < 2026.1.5.1 0 < 2025.3.6.2
JetBrains / WebStorm
2026.2 < 2026.2.4 2026.1 < 2026.1.5.1 0 < 2025.3.6.2
JetBrains / GoLand
2026.2 < 2026.2.4 2026.1 < 2026.1.5.1 0 < 2025.3.5.2
JetBrains / Rider
2026.2 < 2026.2.4 2026.1 < 2026.1.5.3 0 < 2025.3.5.3
JetBrains / CLion
2026.2 < 2026.2.4.1 2026.1 < 2026.1.5.2 0 < 2025.3.6.3
JetBrains / DataGrip
2026.2 < 2026.2.6.1 2026.1 < 2026.1.4.1 0 < 2025.3.6.1
JetBrains / RustRover
2026.2 < 2026.2.5 2026.1 < 2026.1.4.1 0 < 2025.3.7.1
JetBrains / DataSpell
2026.1 < 2026.1.3.1 0 < 2025.3.3.1
References
jetbrains.com: https://www.jetbrains.com/privacy-security/issues-fixed/ blog.jetbrains.com: https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/ emudhra.com: https://emudhra.com/en/post/certificate-security-incident bugzilla.mozilla.org: https://bugzilla.mozilla.org/show_bug.cgi?id=2083449