9.0Kritisch
CVE-2026-118697
Beschreibung
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5, the jetbrainsd daemon trusted compromised intermediate certificates
Schwachstellentyp (CWE):
CWE-295
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| JetBrains | CLion | < 2026.2.4.1 | |
| JetBrains | DataGrip | < 2026.2.6.1 | |
| JetBrains | GoLand | < 2026.2.4 | |
| JetBrains | IntelliJ IDEA | < 2026.2.4 | |
| JetBrains | PhpStorm | < 2026.2.4 | |
| JetBrains | PyCharm | < 2026.2.4 | |
| JetBrains | Rider | < 2026.2.4 | |
| JetBrains | RubyMine | < 2026.2.4 | |
| JetBrains | RustRover | < 2026.2.5 | |
| JetBrains | Toolbox App | 3.9 – < 3.9.1, < 3.8.2 | |
| JetBrains | WebStorm | < 2026.2.4 |