PULSEUnderground Intel

LIVE21signals / 24h

FEED

ransombraincipher reclama a Mutares.com · DE · Manufacturingransomgenesis reclama a Xinos Construction · US · Manufacturingransomgenesis reclama a Insation Technologies · US · Technologyransomeclipse reclama a Comercial en Fletes México, S.A. de C.V. · MX · Transportationransomincransom reclama a https://www.sleep-clinic.ca/ · CA · Healthcareransomsilentransomgroup reclama a Tucker Ellis · US · Professional Servicesransomsilentransomgroup reclama a Wachtell, Lipton, Rosen & Katz · US · Professional Servicesransomsilentransomgroup reclama a B... law · Professional Servicesransomakira reclama a Ligne Roset · FR · Retail & E-Commerceransomakira reclama a Houston Machine and Thread · US · Manufacturingransomdirewolf reclama a Algonomy · US · Technologyransomobsoft reclama a Company #6ransomakira reclama a Hudson & Hudson SignProducts · US · Manufacturingransomshiba reclama a Istituto Borgo · IT · Otherransombraincipher reclama a Mutares.com · DE · Manufacturingransomgenesis reclama a Xinos Construction · US · Manufacturingransomgenesis reclama a Insation Technologies · US · Technologyransomeclipse reclama a Comercial en Fletes México, S.A. de C.V. · MX · Transportationransomincransom reclama a https://www.sleep-clinic.ca/ · CA · Healthcareransomsilentransomgroup reclama a Tucker Ellis · US · Professional Servicesransomsilentransomgroup reclama a Wachtell, Lipton, Rosen & Katz · US · Professional Servicesransomsilentransomgroup reclama a B... law · Professional Servicesransomakira reclama a Ligne Roset · FR · Retail & E-Commerceransomakira reclama a Houston Machine and Thread · US · Manufacturingransomdirewolf reclama a Algonomy · US · Technologyransomobsoft reclama a Company #6ransomakira reclama a Hudson & Hudson SignProducts · US · Manufacturingransomshiba reclama a Istituto Borgo · IT · Other

CVE WatchNov 6, 2026

CVE-2026-123858

In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects

CVSS

4.4

Medium

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Nov 6, 2026 · Last modified: Nov 6, 2026 · CWE-829

EPSS · 30d

Not enough EPSS history yet.

Technical description

In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects

Official references

www.jetbrains.comhttps://www.jetbrains.com/privacy-security/issues-fixed/

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1238545.5 MED

——0In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module8h CVE-2026-1238537.8 HIG

——0In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process8h CVE-2026-1238497.0 HIG

——0In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers8h CVE-2026-1238433.3 LOW

——0In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration8h CVE-2026-1238387.8 HIG

——0In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file8h CVE-2026-1238333.6 LOW

——0In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects8h