GHSA-c9gr-394r-65ggCriticalCVSS 9.0
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the...
🔗 CVE IDs covered (1)
📋 Description
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2026-118697
- https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides
- https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
- https://emudhra.com/en/post/certificate-security-incident
- https://www.jetbrains.com/privacy-security/issues-fixed
- https://github.com/advisories/GHSA-c9gr-394r-65gg