CVE-2026-118696

JetBrains IDEs Trust Revoked Intermediate Certificates

Published Oct 30, 2026 CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Description
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title JetBrains IDEs Trust Revoked Intermediate Certificates
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Jetbrains
Jetbrains clion
Jetbrains datagrip
Jetbrains dataspell
Jetbrains goland
Jetbrains intellij Idea
Jetbrains phpstorm
Jetbrains pycharm
Jetbrains rider
Jetbrains rubymine
Jetbrains rustrover
Jetbrains webstorm
Vendors & Products Jetbrains
Jetbrains clion
Jetbrains datagrip
Jetbrains dataspell
Jetbrains goland
Jetbrains intellij Idea
Jetbrains phpstorm
Jetbrains pycharm
Jetbrains rider
Jetbrains rubymine
Jetbrains rustrover
Jetbrains webstorm
Type Values Removed Values Added
Description In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates
Weaknesses CWE-299
References
Metrics cvssV3_1

{'score': 8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
JetBrains
Published
Updated
Oct 31, 2026, 3:56 AM
Reserved
Oct 28, 2026, 6:33 PM
Status
Awaiting Analysis
Published
Oct 30, 2026, 6:17 PM
Modified
Oct 31, 2026, 4:18 AM