CVE-2026-118697

CVSS 9.0 (critical) · published 2026-10-30

In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5, the jetbrainsd daemon trusted compromised intermediate certificates

Weakness: CWE-295

Source: NVD CVE-2026-118697

References

• https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/
• https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
• https://emudhra.com/en/post/certificate-security-incident
• https://www.jetbrains.com/privacy-security/issues-fixed/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.