Log in Start free

Vulnerability · Published Oct 30, 2026 · Assigned by JetBrains

CVE-2026-118696

High 8.0

In plain English

A high-severity security flaw in CLion from JetBrains. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 3.1)8.0High
Exploit odds (30 days)0.3%top 80.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates

Affected products (as reported)

VendorProductVersions
JetBrains IntelliJ IDEA 2026.2 – before 2026.2.42026.1 – before 2026.1.5.10 – before 2025.3.6.2
JetBrains PyCharm 2026.2 – before 2026.2.42026.1 – before 2026.1.5.10 – before 2025.3.6.2
JetBrains PhpStorm 2026.2 – before 2026.2.42026.1 – before 2026.1.5.10 – before 2025.3.6.2
JetBrains RubyMine 2026.2 – before 2026.2.42026.1 – before 2026.1.5.10 – before 2025.3.6.2
JetBrains WebStorm 2026.2 – before 2026.2.42026.1 – before 2026.1.5.10 – before 2025.3.6.2
JetBrains GoLand 2026.2 – before 2026.2.42026.1 – before 2026.1.5.10 – before 2025.3.5.2
JetBrains Rider 2026.2 – before 2026.2.42026.1 – before 2026.1.5.30 – before 2025.3.5.3
JetBrains CLion 2026.2 – before 2026.2.4.12026.1 – before 2026.1.5.20 – before 2025.3.6.3
JetBrains DataGrip 2026.2 – before 2026.2.6.12026.1 – before 2026.1.4.10 – before 2025.3.6.1
JetBrains RustRover 2026.2 – before 2026.2.52026.1 – before 2026.1.4.10 – before 2025.3.7.1
JetBrains DataSpell 2026.1 – before 2026.1.3.10 – before 2025.3.3.1

Weakness: CWE-299 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

References