CVE-2026-118696 - Vulnerability Details

Description

In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates

Published: 2026-10-30

Score: 8 High

EPSS: n/a

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

JetBrains

IntelliJ IDEA

unaffected

Version	Status	Constraints
`2026.2`	affected	< 2026.2.4
`2026.1`	affected	< 2026.1.5.1
`0`	affected	< 2025.3.6.2

JetBrains

PyCharm

unaffected

Version	Status	Constraints
`2026.2`	affected	< 2026.2.4
`2026.1`	affected	< 2026.1.5.1
`0`	affected	< 2025.3.6.2

JetBrains

PhpStorm

unaffected

Version	Status	Constraints
`2026.2`	affected	< 2026.2.4
`2026.1`	affected	< 2026.1.5.1
`0`	affected	< 2025.3.6.2

JetBrains

RubyMine

unaffected

Version	Status	Constraints
`2026.2`	affected	< 2026.2.4
`2026.1`	affected	< 2026.1.5.1
`0`	affected	< 2025.3.6.2

JetBrains

WebStorm

unaffected

Version	Status	Constraints
`2026.2`	affected	< 2026.2.4
`2026.1`	affected	< 2026.1.5.1
`0`	affected	< 2025.3.6.2

JetBrains

GoLand

unaffected

Version	Status	Constraints
`2026.2`	affected	< 2026.2.4
`2026.1`	affected	< 2026.1.5.1
`0`	affected	< 2025.3.5.2

JetBrains

Rider

unaffected

Version	Status	Constraints
`2026.2`	affected	< 2026.2.4
`2026.1`	affected	< 2026.1.5.3
`0`	affected	< 2025.3.5.3

JetBrains

CLion

unaffected

Version	Status	Constraints
`2026.2`	affected	< 2026.2.4.1
`2026.1`	affected	< 2026.1.5.2
`0`	affected	< 2025.3.6.3

JetBrains

DataGrip

unaffected

Version	Status	Constraints
`2026.2`	affected	< 2026.2.6.1
`2026.1`	affected	< 2026.1.4.1
`0`	affected	< 2025.3.6.1

JetBrains

RustRover

unaffected

Version	Status	Constraints
`2026.2`	affected	< 2026.2.5
`2026.1`	affected	< 2026.1.4.1
`0`	affected	< 2025.3.7.1

JetBrains

DataSpell

unaffected

Version	Status	Constraints
`2026.1`	affected	< 2026.1.3.1
`0`	affected	< 2025.3.3.1

No data.

Vendor Product Confidence Versions

Jetbrains

Clion

100%

Version	Status	Scheme	Platform
`[2026.2,2026.2.4.1)`	affected	generic	—
`[2026.1,2026.1.5.2)`	affected	generic	—
`[0,2025.3.6.3)`	affected	generic	—

Jetbrains

Datagrip

100%

Version	Status	Scheme	Platform
`[2026.2,2026.2.6.1)`	affected	generic	—
`[2026.1,2026.1.4.1)`	affected	generic	—
`[0,2025.3.6.1)`	affected	generic	—

Jetbrains

Dataspell

100%

Version	Status	Scheme	Platform
`[2026.1,2026.1.3.1)`	affected	generic	—
`[0,2025.3.3.1)`	affected	generic	—

Jetbrains

Goland

100%

Version	Status	Scheme	Platform
`[2026.2,2026.2.4)`	affected	generic	—
`[2026.1,2026.1.5.1)`	affected	generic	—
`[0,2025.3.5.2)`	affected	generic	—

Jetbrains

Intellij Idea

100%

Version	Status	Scheme	Platform
`[2026.2,2026.2.4)`	affected	generic	—
`[2026.1,2026.1.5.1)`	affected	generic	—
`[0,2025.3.6.2)`	affected	generic	—

Jetbrains

Phpstorm

100%

Version	Status	Scheme	Platform
`[2026.2,2026.2.4)`	affected	generic	—
`[2026.1,2026.1.5.1)`	affected	generic	—
`[0,2025.3.6.2)`	affected	generic	—

Jetbrains

Pycharm

100%

Version	Status	Scheme	Platform
`[2026.2,2026.2.4)`	affected	generic	—
`[2026.1,2026.1.5.1)`	affected	generic	—
`[0,2025.3.6.2)`	affected	generic	—

Jetbrains

Rider

100%

Version	Status	Scheme	Platform
`[2026.2,2026.2.4)`	affected	generic	—
`[2026.1,2026.1.5.3)`	affected	generic	—
`[0,2025.3.5.3)`	affected	generic	—

Jetbrains

Rubymine

100%

Version	Status	Scheme	Platform
`[2026.2,2026.2.4)`	affected	generic	—
`[2026.1,2026.1.5.1)`	affected	generic	—
`[0,2025.3.6.2)`	affected	generic	—

Jetbrains

Rustrover

100%

Version	Status	Scheme	Platform
`[2026.2,2026.2.5)`	affected	generic	—
`[2026.1,2026.1.4.1)`	affected	generic	—
`[0,2025.3.7.1)`	affected	generic	—

Jetbrains

Webstorm

100%

Version	Status	Scheme	Platform
`[2026.2,2026.2.4)`	affected	generic	—
`[2026.1,2026.1.5.1)`	affected	generic	—
`[0,2025.3.6.2)`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
https://emudhra.com/en/post/certificate-security-incident
https://www.jetbrains.com/privacy-security/issues-fixed/

History

Fri, 30 Oct 2026 19:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 30 Oct 2026 19:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Jetbrains Jetbrains clion Jetbrains datagrip Jetbrains dataspell Jetbrains goland Jetbrains intellij Idea Jetbrains phpstorm Jetbrains pycharm Jetbrains rider Jetbrains rubymine Jetbrains rustrover Jetbrains webstorm
Vendors & Products		Jetbrains Jetbrains clion Jetbrains datagrip Jetbrains dataspell Jetbrains goland Jetbrains intellij Idea Jetbrains phpstorm Jetbrains pycharm Jetbrains rider Jetbrains rubymine Jetbrains rustrover Jetbrains webstorm

Fri, 30 Oct 2026 17:45:00 +0000

Type	Values Removed	Values Added
Description		In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates
Weaknesses		CWE-299
References		https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/ https://bugzilla.mozilla.org/show_bug.cgi?id=2083449 https://emudhra.com/en/post/certificate-security-incident https://www.jetbrains.com/privacy-security/issues-fixed/
Metrics		cvssV3_1 `{'score': 8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N'}`

Subscriptions

Jetbrains Clion Datagrip Dataspell Goland Intellij Idea Phpstorm Pycharm Rider Rubymine Rustrover Webstorm

MITRE

Status: PUBLISHED

Assigner: JetBrains

Published: 2026-10-30T17:31:04.317Z

Updated: 2026-10-30T18:49:59.260Z

Reserved: 2026-10-28T18:33:13.383Z

Link: CVE-2026-118696

Vulnrichment

Updated: 2026-10-30T18:41:36.679Z

NVD

Status : Awaiting Analysis

Published: 2026-10-30T18:17:24.530

Modified: 2026-10-30T19:37:07.073

Link: CVE-2026-118696

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-30T19:00:15Z

Weaknesses

CWE-299
Improper Check for Certificate Revocation

Tracking

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object