CVE-2026-64809 — Vulnerability intelligence
jetbrains — phpstorm
Published:
- CVSS
- 8.4
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter