Details
- Type
- Misconfiguration
- Impact
- Man In The Middle
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
- Published
- 30 October 2026
- Updated
- 1 November 2026
- Weakness
- CWE-299
CVE-2026-118696 JetBrains Products - Misconfiguration
JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand, Rider, CLion, DataGrip, RustRover, and DataSpell before specified versions contain a certificate validation issue caused by trusted revoked intermediate certificates in the embedded browser, letting attackers potentially bypass trust validation, exploit requires use of embedded browser.
CVSS base score
8.0
/10
High- CISA KEV
- Not listed
- Public exploit
- None known
- Authentication
- Not required
- EPSS
- 0.27% chance of exploitation in 30 days