CVE-2026-123858

Published 6 November 2026 · tracked since 7 November 2026

Description

In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted projects

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-104639
• CVE-2026-104338
• CVE-2026-104337
• CVE-2026-104307
• CVE-2026-103375
• CVE-2026-103303
• CVE-2026-123613 MEDIUM 5.3
• CVE-2026-123612 LOW 2.3
• CVE-2026-123611 LOW 3.7
• CVE-2026-123610 LOW 3.7

→ Open the live CVE board · all tools