CVE-2026-118696

State: Published
Severity: 8.0 High
Published: Oct 30, 2026
Updated: Oct 31, 2026
Reserved: Oct 28, 2026

Description

In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates

Scores

CVSS	Score	Vector	Source
3.1	8.0 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N	JetBrains

Weaknesses

CWE-299 Improper Check for Certificate Revocation

Affected Products

Product	Versions
IntelliJ IDEAJetBrains	2026.2 to before 2026.2.4Affected 2026.1 to before 2026.1.5.1Affected before 2025.3.6.2Affected
PyCharmJetBrains	2026.2 to before 2026.2.4Affected 2026.1 to before 2026.1.5.1Affected before 2025.3.6.2Affected
PhpStormJetBrains	2026.2 to before 2026.2.4Affected 2026.1 to before 2026.1.5.1Affected before 2025.3.6.2Affected
RubyMineJetBrains	2026.2 to before 2026.2.4Affected 2026.1 to before 2026.1.5.1Affected before 2025.3.6.2Affected
WebStormJetBrains	2026.2 to before 2026.2.4Affected 2026.1 to before 2026.1.5.1Affected before 2025.3.6.2Affected
GoLandJetBrains	2026.2 to before 2026.2.4Affected 2026.1 to before 2026.1.5.1Affected before 2025.3.5.2Affected
RiderJetBrains	2026.2 to before 2026.2.4Affected 2026.1 to before 2026.1.5.3Affected before 2025.3.5.3Affected
CLionJetBrains	2026.2 to before 2026.2.4.1Affected 2026.1 to before 2026.1.5.2Affected before 2025.3.6.3Affected
DataGripJetBrains	2026.2 to before 2026.2.6.1Affected 2026.1 to before 2026.1.4.1Affected before 2025.3.6.1Affected
RustRoverJetBrains	2026.2 to before 2026.2.5Affected 2026.1 to before 2026.1.4.1Affected before 2025.3.7.1Affected
DataSpellJetBrains	2026.1 to before 2026.1.3.1Affected before 2025.3.3.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.