CVE-2026-64808
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling
CVSS
8.4
Alto
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 23 jul 2026 · Última mod.: 23 jul 2026 · CWE-829
Sin historial EPSS suficiente todavía.
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-648117.8 ALT—
——0In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration5hCVE-2026-648098.4 ALT—
——0In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter5hCVE-2026-648077.8 ALT—
——0In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration5hCVE-2026-648068.4 ALT—
——0In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter5hCVE-2026-648058.4 ALT—
——0In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling5hCVE-2026-648048.4 ALT—
——0In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling5h