In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
JetBrains IntelliJ IDEA unaffected
Version Status Constraints
2026.2 affected < 2026.2.4
2026.1 affected < 2026.1.5.1
0 affected < 2025.3.6.2
JetBrains PyCharm unaffected
Version Status Constraints
2026.2 affected < 2026.2.4
2026.1 affected < 2026.1.5.1
0 affected < 2025.3.6.2
JetBrains PhpStorm unaffected
Version Status Constraints
2026.2 affected < 2026.2.4
2026.1 affected < 2026.1.5.1
0 affected < 2025.3.6.2
JetBrains RubyMine unaffected
Version Status Constraints
2026.2 affected < 2026.2.4
2026.1 affected < 2026.1.5.1
0 affected < 2025.3.6.2
JetBrains WebStorm unaffected
Version Status Constraints
2026.2 affected < 2026.2.4
2026.1 affected < 2026.1.5.1
0 affected < 2025.3.6.2
JetBrains GoLand unaffected
Version Status Constraints
2026.2 affected < 2026.2.4
2026.1 affected < 2026.1.5.1
0 affected < 2025.3.5.2
JetBrains Rider unaffected
Version Status Constraints
2026.2 affected < 2026.2.4
2026.1 affected < 2026.1.5.3
0 affected < 2025.3.5.3
JetBrains CLion unaffected
Version Status Constraints
2026.2 affected < 2026.2.4.1
2026.1 affected < 2026.1.5.2
0 affected < 2025.3.6.3
JetBrains DataGrip unaffected
Version Status Constraints
2026.2 affected < 2026.2.6.1
2026.1 affected < 2026.1.4.1
0 affected < 2025.3.6.1
JetBrains RustRover unaffected
Version Status Constraints
2026.2 affected < 2026.2.5
2026.1 affected < 2026.1.4.1
0 affected < 2025.3.7.1
JetBrains DataSpell unaffected
Version Status Constraints
2026.1 affected < 2026.1.3.1
0 affected < 2025.3.3.1

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Jetbrains Subscribe
Clion Subscribe
Datagrip Subscribe
Dataspell Subscribe
Goland Subscribe
Intellij Idea Subscribe
Phpstorm Subscribe
Pycharm Subscribe
Rider Subscribe
Rubymine Subscribe
Rustrover Subscribe
Webstorm Subscribe

Project Subscriptions

Vendors Products
Jetbrains Subscribe
Clion Subscribe
Datagrip Subscribe
Dataspell Subscribe
Goland Subscribe
Intellij Idea Subscribe
Phpstorm Subscribe
Pycharm Subscribe
Rider Subscribe
Rubymine Subscribe
Rustrover Subscribe
Webstorm Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/ cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449 cve-icon cve-icon
https://emudhra.com/en/post/certificate-security-incident cve-icon cve-icon
https://www.jetbrains.com/privacy-security/issues-fixed/ cve-icon cve-icon
History

Fri, 30 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 30 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Jetbrains
Jetbrains clion
Jetbrains datagrip
Jetbrains dataspell
Jetbrains goland
Jetbrains intellij Idea
Jetbrains phpstorm
Jetbrains pycharm
Jetbrains rider
Jetbrains rubymine
Jetbrains rustrover
Jetbrains webstorm
Vendors & Products Jetbrains
Jetbrains clion
Jetbrains datagrip
Jetbrains dataspell
Jetbrains goland
Jetbrains intellij Idea
Jetbrains phpstorm
Jetbrains pycharm
Jetbrains rider
Jetbrains rubymine
Jetbrains rustrover
Jetbrains webstorm

Fri, 30 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
Description In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates
Weaknesses CWE-299
References
Metrics cvssV3_1

{'score': 8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: JetBrains

Published:

Updated: 2026-10-30T18:49:59.260Z

Reserved: 2026-10-28T18:33:13.383Z

Link: CVE-2026-118696

cve-icon Vulnrichment

Updated: 2026-10-30T18:41:36.679Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-30T18:17:24.530

Modified: 2026-10-30T19:37:07.073

Link: CVE-2026-118696

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-30T19:00:15Z

Weaknesses