9.0Crítica
CVE-2026-118697
Descripción
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5, the jetbrainsd daemon trusted compromised intermediate certificates
Debilidad (CWE):
CWE-295
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| JetBrains | CLion | < 2026.2.4.1 | |
| JetBrains | DataGrip | < 2026.2.6.1 | |
| JetBrains | GoLand | < 2026.2.4 | |
| JetBrains | IntelliJ IDEA | < 2026.2.4 | |
| JetBrains | PhpStorm | < 2026.2.4 | |
| JetBrains | PyCharm | < 2026.2.4 | |
| JetBrains | Rider | < 2026.2.4 | |
| JetBrains | RubyMine | < 2026.2.4 | |
| JetBrains | RustRover | < 2026.2.5 | |
| JetBrains | Toolbox App | 3.9 – < 3.9.1, < 3.8.2 | |
| JetBrains | WebStorm | < 2026.2.4 |