{"id":"CVE-2026-118697","title":"In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover befo…","summary":"In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover befo…","severity":"critical","cvss":9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-295"],"vendor":"JetBrains","product":"Toolbox App","affected":["toolbox_app >= 3.9 < 3.9.1","toolbox_app < 3.8.2","intellij_idea < 2026.2.4","PyCharm < 2026.2.4","PhpStorm < 2026.2.4","RubyMine < 2026.2.4","WebStorm < 2026.2.4","GoLand < 2026.2.4","Rider < 2026.2.4","CLion < 2026.2.4.1","DataGrip < 2026.2.6.1","RustRover < 2026.2.5"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-30T00:00:00+00:00"},"published":"2026-10-30","updated":"2026-11-02","sourceUpdated":"2026-11-02T16:19:28.345Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118697","references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/"},{"url":"https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/"},{"url":"https://emudhra.com/en/post/certificate-security-incident"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2083449"}],"tags":["cve.org"],"epss":0.00291,"epssPercentile":0.21768,"ingestedAt":"2026-11-05T19:30:42.708Z","slug":"CVE-2026-118697","body":"## Overview\n\nIn JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5, the jetbrainsd daemon trusted compromised intermediate certificates\n\n## Affected\n\n- `toolbox_app >= 3.9 < 3.9.1`\n- `toolbox_app < 3.8.2`\n- `intellij_idea < 2026.2.4`\n- `PyCharm < 2026.2.4`\n- `PhpStorm < 2026.2.4`\n- `RubyMine < 2026.2.4`\n- `WebStorm < 2026.2.4`\n- `GoLand < 2026.2.4`\n- `Rider < 2026.2.4`\n- `CLion < 2026.2.4.1`\n- `DataGrip < 2026.2.6.1`\n- `RustRover < 2026.2.5`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":50,"depthScoreParts":{"impact":49.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}