Revoked Intermediate Certificates Vulnerability in JetBrains IDEs
CVE-2026-118696

8HIGH

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Pycharm
PHPstorm
Rubymine
Vendor
CVE Published:
30 October 2026

What is CVE-2026-118696?

JetBrains IDEs such as IntelliJ IDEA, PyCharm, PhpStorm, and others prior to specified versions are vulnerable due to the use of embedded browsers that trust revoked intermediate certificates. This flaw could potentially allow an attacker to exploit compromised certificates, impacting the integrity of secure communications within the IDEs.

Affected Version(s)

CLion 2026.2 < 2026.2.4.1

CLion 2026.1 < 2026.1.5.2

CLion 0 < 2025.3.6.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/
https://blog.jetbrains.com/security/2026/10/compromised-e...
https://emudhra.com/en/post/certificate-security-incident

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.