JetBrains PhpStorm < 2026.2 Multiple Vulnerabilities

According to its self-reported version, the JetBrains PhpStorm installation on the remote host is prior to 2026.2. It is, therefore, affected by a multiple vulnerabilities. - In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project toolin...

CVE-2026-64809

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter...

CVE-2026-64808

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling...

CVE-2026-64808

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling...

EUVD-2026-48234

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter...

CVE-2026-64808

Affected software: JetBrains PhpStorm. Vulnerability: via project tooling, PhpStorm before 2026.2 allows arbitrary code execution prior to granting project trust. Root cause is related to the project tooling workflow. Impact: high (as per CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploitati...

EUVD-2026-48233

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling...

CVE-2026-64808

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling...

CVE-2026-64809

JetBrains PhpStorm is affected by CVE-2026-64809: arbitrary code execution possible before granting project trust via the configured interpreter, in PhpStorm before 2026.2. Root cause details are not provided; impact is high with local access and no user interaction required. Exploitation status ...

CVE-2026-64809

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter...

CVE-2026-64809

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter...

PT-2026-63963

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter...

PT-2026-63962

Name of the Vulnerable Software and Affected Versions JetBrains PhpStorm versions prior to 2026.2 Description Arbitrary code execution is possible through project tooling before the user grants trust to the project. Recommendations Update JetBrains PhpStorm to version 2026.2...

CVE-2026-64808: Inclusion of Functionality from Untrusted Control Sphere

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling...

CVE-2026-64809: Inclusion of Functionality from Untrusted Control Sphere

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter...

CVE-2022-48435

In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file...

CVE-2021-25764

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs...

Exploit for Deserialization of Untrusted Data in Givewp

This post is a research article published by EQSTLabhttps://g...

Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce

CVE-2024-34102 ★ Thanks to @th3gokul, Sanjaith3hacker, Chocapi...

CVE-2024-37051

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5,...