In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates
PUBLISHED5.2CWE-299
Problem type
Affected products
JetBrains
IntelliJ IDEA
< 2026.2.4 - AFFECTED
< 2026.1.5.1 - AFFECTED
< 2025.3.6.2 - AFFECTED
PyCharm
< 2026.2.4 - AFFECTED
< 2026.1.5.1 - AFFECTED
< 2025.3.6.2 - AFFECTED
PhpStorm
< 2026.2.4 - AFFECTED
< 2026.1.5.1 - AFFECTED
< 2025.3.6.2 - AFFECTED
RubyMine
< 2026.2.4 - AFFECTED
< 2026.1.5.1 - AFFECTED
< 2025.3.6.2 - AFFECTED
WebStorm
< 2026.2.4 - AFFECTED
< 2026.1.5.1 - AFFECTED
< 2025.3.6.2 - AFFECTED
GoLand
< 2026.2.4 - AFFECTED
< 2026.1.5.1 - AFFECTED
< 2025.3.5.2 - AFFECTED
Rider
< 2026.2.4 - AFFECTED
< 2026.1.5.3 - AFFECTED
< 2025.3.5.3 - AFFECTED
CLion
< 2026.2.4.1 - AFFECTED
< 2026.1.5.2 - AFFECTED
< 2025.3.6.3 - AFFECTED
DataGrip
< 2026.2.6.1 - AFFECTED
< 2026.1.4.1 - AFFECTED
< 2025.3.6.1 - AFFECTED
RustRover
< 2026.2.5 - AFFECTED
< 2026.1.4.1 - AFFECTED
< 2025.3.7.1 - AFFECTED
DataSpell
< 2026.1.3.1 - AFFECTED
< 2025.3.3.1 - AFFECTED
References
jetbrains.com
https://www.jetbrains.com/privacy-security/issues-fixed/
blog.jetbrains.com
https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/
emudhra.com
https://emudhra.com/en/post/certificate-security-incident
bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
GitHub Security Advisories
GHSA-c5hv-w26w-w8h7
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4,...
https://github.com/advisories/GHSA-c5hv-w26w-w8h7In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates
nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-118696
blog.jetbrains.com
https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides
bugzilla.mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
emudhra.com
https://emudhra.com/en/post/certificate-security-incident
jetbrains.com
https://www.jetbrains.com/privacy-security/issues-fixed
github.com
https://github.com/advisories/GHSA-c5hv-w26w-w8h7
JSON source
https://cveawg.mitre.org/api/cve/CVE-2026-118696Click to expand
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-118696",
"assignerOrgId": "547ada31-17d8-4964-bc5f-1b8238ba8014",
"assignerShortName": "JetBrains",
"dateUpdated": "2026-10-30T17:31:04.317Z",
"dateReserved": "2026-10-28T18:33:13.383Z",
"datePublished": "2026-10-30T17:31:04.317Z",
"state": "PUBLISHED"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "547ada31-17d8-4964-bc5f-1b8238ba8014",
"shortName": "JetBrains",
"dateUpdated": "2026-10-30T17:31:04.317Z"
},
"descriptions": [
{
"lang": "en",
"value": "In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates"
}
]
}
],
"affected": [
{
"vendor": "JetBrains",
"product": "IntelliJ IDEA",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.2",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.2.4"
},
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.5.1"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.6.2"
}
]
},
{
"vendor": "JetBrains",
"product": "PyCharm",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.2",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.2.4"
},
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.5.1"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.6.2"
}
]
},
{
"vendor": "JetBrains",
"product": "PhpStorm",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.2",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.2.4"
},
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.5.1"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.6.2"
}
]
},
{
"vendor": "JetBrains",
"product": "RubyMine",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.2",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.2.4"
},
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.5.1"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.6.2"
}
]
},
{
"vendor": "JetBrains",
"product": "WebStorm",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.2",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.2.4"
},
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.5.1"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.6.2"
}
]
},
{
"vendor": "JetBrains",
"product": "GoLand",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.2",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.2.4"
},
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.5.1"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.5.2"
}
]
},
{
"vendor": "JetBrains",
"product": "Rider",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.2",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.2.4"
},
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.5.3"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.5.3"
}
]
},
{
"vendor": "JetBrains",
"product": "CLion",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.2",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.2.4.1"
},
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.5.2"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.6.3"
}
]
},
{
"vendor": "JetBrains",
"product": "DataGrip",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.2",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.2.6.1"
},
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.4.1"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.6.1"
}
]
},
{
"vendor": "JetBrains",
"product": "RustRover",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.2",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.2.5"
},
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.4.1"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.7.1"
}
]
},
{
"vendor": "JetBrains",
"product": "DataSpell",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2026.1",
"status": "affected",
"versionType": "semver",
"lessThan": "2026.1.3.1"
},
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "2025.3.3.1"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-299: Improper Check for Certificate Revocation",
"cweId": "CWE-299",
"type": "CWE"
}
]
}
],
"references": [
{
"url": "https://www.jetbrains.com/privacy-security/issues-fixed/"
},
{
"url": "https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/"
},
{
"url": "https://emudhra.com/en/post/certificate-security-incident"
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2083449"
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseScore": 8,
"baseSeverity": "HIGH"
}
}
]
}
}
}