Skip to content
OpenAdvisories
High · 8.0 CVE-2026-118696 EUVD-2026-114244GHSA-c5hv-w26w-w8h7

In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 202…

Published Oct 30, 2026 · Updated Oct 31, 2026 · Assigned by JetBrains

Description

In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates

Affected products

VendorProductAffectedFixed
JetBrains IntelliJ IDEA 2026.2 – < 2026.2.4, 2026.1 – < 2026.1.5.1, < 2025.3.6.2 2026.2.4
JetBrains PyCharm 2026.2 – < 2026.2.4, 2026.1 – < 2026.1.5.1, < 2025.3.6.2 2026.2.4
JetBrains PhpStorm 2026.2 – < 2026.2.4, 2026.1 – < 2026.1.5.1, < 2025.3.6.2 2026.2.4
JetBrains RubyMine 2026.2 – < 2026.2.4, 2026.1 – < 2026.1.5.1, < 2025.3.6.2 2026.2.4
JetBrains WebStorm 2026.2 – < 2026.2.4, 2026.1 – < 2026.1.5.1, < 2025.3.6.2 2026.2.4
JetBrains GoLand 2026.2 – < 2026.2.4, 2026.1 – < 2026.1.5.1, < 2025.3.5.2 2026.2.4
JetBrains Rider 2026.2 – < 2026.2.4, 2026.1 – < 2026.1.5.3, < 2025.3.5.3 2026.2.4
JetBrains CLion 2026.2 – < 2026.2.4.1, 2026.1 – < 2026.1.5.2, < 2025.3.6.3 2026.2.4.1
JetBrains DataGrip 2026.2 – < 2026.2.6.1, 2026.1 – < 2026.1.4.1, < 2025.3.6.1 2026.2.6.1
JetBrains RustRover 2026.2 – < 2026.2.5, 2026.1 – < 2026.1.4.1, < 2025.3.7.1 2026.2.5
JetBrains DataSpell 2026.1 – < 2026.1.3.1, < 2025.3.3.1 2026.1.3.1

Advisories 1

References