CVE-2026-118696

Name of the Vulnerable Software and Affected Versions IntelliJ IDEA versions prior to 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2 PyCharm versions prior to 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2 PhpStorm versions prior to 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2 RubyMine versions prior to 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2 WebStorm versions prior to 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2 GoLand versions prior to 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2 Rider versions prior to 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3 CLion versions prior to 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3 DataGrip versions prior to 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1 RustRover versions prior to 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1 DataSpell versions prior to 2026.1.3.1 and 2025.3.3.1

Description The embedded browser in several JetBrains IDEs incorrectly trusts revoked intermediate certificates.

Recommendations Update IntelliJ IDEA to version 2026.3, 2026.2.4, 2026.1.5.1, or 2025.3.6.2 Update PyCharm to version 2026.3, 2026.2.4, 2026.1.5.1, or 2025.3.6.2 Update PhpStorm to version 2026.3, 2026.2.4, 2026.1.5.1, or 2025.3.6.2 Update RubyMine to version 2026.3, 2026.2.4, 2026.1.5.1, or 2025.3.6.2 Update WebStorm to version 2026.3, 2026.2.4, 2026.1.5.1, or 2025.3.6.2 Update GoLand to version 2026.3, 2026.2.4, 2026.1.5.1, or 2025.3.5.2 Update Rider to version 2026.3, 2026.2.4, 2026.1.5.3, or 2025.3.5.3 Update CLion to version 2026.3, 2026.2.4.1, 2026.1.5.2, or 2025.3.6.3 Update DataGrip to version 2026.3, 2026.2.6.1, 2026.1.4.1, or 2025.3.6.1 Update RustRover to version 2026.3, 2026.2.5, 2026.1.4.1, or 2025.3.7.1 Update DataSpell to version 2026.1.3.1 or 2025.3.3.1