In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2025.3.6.2, or is 2026.1.x prior to 2026.1.5.1, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a vulnerability:

  - In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2, the embedded browser trusted     revoked intermediate certificates. (CVE-2026-118696)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the JetBrains PhpStorm installation on the remote host is prior to 2025.3.6.2, or 2026.1.x prior to 2026.1.5.1, or 2026.2.x prior to 2026.2.4. It is, therefore, affected by an improper certificate revocation check vulnerability.

In JetBrains PhpStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2, the embedded browser trusted revoked intermediate certificates. (CVE-2026-118696)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2025.3.6.2, or is 2026.1.x prior to 2026.1.5.1, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability.

In JetBrains PyCharm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2, the embedded browser trusted revoked intermediate certificates. An attacker able to intercept network traffic could leverage the compromised intermediate certificate keys to impersonate the websites and services the IDE connects to.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of JetBrains GoLand installed on the remote host is prior to 2025.3.5.2, or 2026.1.x prior to 2026.1.5.1, or 2026.2.x prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability:

  - In JetBrains GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2, the embedded browser trusted     revoked intermediate certificates. (CVE-2026-118696)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of JetBrains WebStorm installed on the remote host is prior to 2025.3.6.2, or is 2026.1.x prior to 2026.1.5.1, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a vulnerability:

  - In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and     2025.3.6.2, the embedded browser trusted revoked intermediate certificates. (CVE-2026-118696)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of JetBrains Rider installed on the remote host is prior to 2025.3.5.3, or is 2026.1.x prior to 2026.1.5.3, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability:

  - In JetBrains Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3 the embedded browser trusted     revoked intermediate certificates. (CVE-2026-118696)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
377048	JetBrains IntelliJ IDEA < 2025.3.6.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Certificate Validation (CVE-2026-118696)	Nessus	Misc.	Local	high
377046	JetBrains PhpStorm < 2025.3.6.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Improper Certificate Revocation Check	Nessus	Misc.	Local	high
376987	JetBrains PyCharm < 2025.3.6.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Revoked Certificate Trust	Nessus	Misc.	Local	high
376986	JetBrains GoLand < 2025.3.5.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Certificate Validation	Nessus	Misc.	Local	high
376985	JetBrains WebStorm < 2025.3.6.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Certificate Validation (CVE-2026-118696)	Nessus	Misc.	Local	high
376984	JetBrains Rider < 2025.3.5.3 / 2026.1.x < 2026.1.5.3 / 2026.2.x < 2026.2.4 Certificate Validation	Nessus	Windows	Local	high

Detections

Analytics

CVE-2026-118696

high

Tenable Plugins

high

high

high

high

high

high