CVE-2026-118696

The record

In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates

Affected packages

Related vulnerabilities

• CVE-2026-115557 Python has added a denylist for known compromised certificates to the "ssl" module to… CWE-299
• CVE-2026-115570 Electron is a framework for writing cross-platform desktop applications using JavaScript… CWE-299
• CVE-2026-111943 On most platforms, Go uses the given system root certificates. CWE-299
• CVE-2026-86231 A security flaw has been discovered in mwiede jsch up to 2.28.5. CWE-299
• CVE-2026-61699 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. CWE-299
• CVE-2026-56821 Netty is an asynchronous, event-driven network application framework. CWE-299
• CVE-2026-9636 A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4… CWE-299
• CVE-2026-6899 Check for certificate revocation only considers the first matching CRL and ignores other… CWE-299