// CVE · PUBLISHED 2026-10-30

CVE-2026-118697

JetBrains / Toolbox App · JetBrains / IntelliJ IDEA · JetBrains / PyCharm · +8

9.0 · CVSS 3.1Critical

Description

In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5, the jetbrainsd daemon trusted compromised intermediate certificates

References

www.cve.org/CVERecord ↗
nvd.nist.gov/vuln/detail/CVE-2026-118697 ↗
blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/ ↗
bugzilla.mozilla.org/show_bug.cgi ↗
emudhra.com/en/post/certificate-security-incident ↗
www.jetbrains.com/privacy-security/issues-fixed/ ↗

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.

CVE-2026-118697

Description

References

Related CVEs