GHSA-c5hv-w26w-w8h7HighCVSS 8.0
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4,...
🔗 CVE IDs covered (1)
📋 Description
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2026-118696
- https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides
- https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
- https://emudhra.com/en/post/certificate-security-incident
- https://www.jetbrains.com/privacy-security/issues-fixed
- https://github.com/advisories/GHSA-c5hv-w26w-w8h7