Advisories · Technology
JetBrains PhpStorm.
Every CVE that names JetBrains PhpStorm among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.0 CriticalCritical · CVSS 9+
Improper certificate validation in JetBrains Toolbox App and others
- JetBrains Toolbox App
- JetBrains IntelliJ IDEA
- Weak cryptography or TLS
- CVSS 8.0 High
JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3…
- JetBrains IntelliJ IDEA
- JetBrains PyCharm
- CWE-299
- CVSS 8.4 High
JetBrains PhpStorm: In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting…
- JetBrains PhpStorm
- CWE-829
- CVSS 8.4 High
JetBrains PhpStorm: In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting…
- JetBrains PhpStorm
- CWE-829
- CVSS 9.3 CriticalCritical · CVSS 9+
Insufficiently protected credentials in JetBrains IntelliJ IDEA and others
- JetBrains IntelliJ IDEA
- JetBrains Aqua
- Hard-coded credentials
- CVSS 3.3 Low
Sensitive information in log files in JetBrains PhpStorm
- JetBrains PhpStorm
- Information disclosure