8.4High

CVE-2026-64808

JetBrains PhpStorm Published: (3 months ago)

Description

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling

Weakness (CWE): CWE-829

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
JetBrains PhpStorm < 2026.2

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:jetbrains:phpstorm:*:*:*:*:*:*:*:* < 2026.2.0