Vulnerability Intelligence Report
CVE-2026-118696
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates
No Active Exploit Signals
CVSS Base Score
8.0
HIGH
Exploitability:1.7
Impact Score:5.8
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-299 ↗CWE-299: Improper Check for Certificate Revocation
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| JetBrains | IntelliJ IDEA | 2026.2 < 2026.2.4 (affected), 2026.1 < 2026.1.5.1 (affected), 0 < 2025.3.6.2 (affected) |
| JetBrains | PyCharm | 2026.2 < 2026.2.4 (affected), 2026.1 < 2026.1.5.1 (affected), 0 < 2025.3.6.2 (affected) |
| JetBrains | PhpStorm | 2026.2 < 2026.2.4 (affected), 2026.1 < 2026.1.5.1 (affected), 0 < 2025.3.6.2 (affected) |
| JetBrains | RubyMine | 2026.2 < 2026.2.4 (affected), 2026.1 < 2026.1.5.1 (affected), 0 < 2025.3.6.2 (affected) |
| JetBrains | WebStorm | 2026.2 < 2026.2.4 (affected), 2026.1 < 2026.1.5.1 (affected), 0 < 2025.3.6.2 (affected) |
| JetBrains | GoLand | 2026.2 < 2026.2.4 (affected), 2026.1 < 2026.1.5.1 (affected), 0 < 2025.3.5.2 (affected) |
| JetBrains | Rider | 2026.2 < 2026.2.4 (affected), 2026.1 < 2026.1.5.3 (affected), 0 < 2025.3.5.3 (affected) |
| JetBrains | CLion | 2026.2 < 2026.2.4.1 (affected), 2026.1 < 2026.1.5.2 (affected), 0 < 2025.3.6.3 (affected) |
| JetBrains | DataGrip | 2026.2 < 2026.2.6.1 (affected), 2026.1 < 2026.1.4.1 (affected), 0 < 2025.3.6.1 (affected) |
| JetBrains | RustRover | 2026.2 < 2026.2.5 (affected), 2026.1 < 2026.1.4.1 (affected), 0 < 2025.3.7.1 (affected) |
| JetBrains | DataSpell | 2026.1 < 2026.1.3.1 (affected), 0 < 2025.3.3.1 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | JetBrains s.r.o. · Vendor · Czech Republic |
| Reserved | 2026-10-28T18:33:13 |
| Published | 2026-10-30T17:31:04 |
| Last Updated | 2026-10-31T03:56:43 |
Community Chatter & Buzz