Vulnerability Details CVE-2026-64808
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 3.8%
CVSS Severity
CVSS v3 Score 8.4
Products affected by CVE-2026-64808
-
cpe:2.3:a:jetbrains:phpstorm:2021.3.1
-
cpe:2.3:a:jetbrains:phpstorm:2023.1
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.0
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.1
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.2
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.3
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.4
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.5
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.6
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.0
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.1
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.2
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.3
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.4
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.5
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.6
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.0
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.1
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.2
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.3
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.4
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.5
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.6
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.7
-
cpe:2.3:a:jetbrains:phpstorm:2024.1.0
-
cpe:2.3:a:jetbrains:phpstorm:2024.1.1
-
cpe:2.3:a:jetbrains:phpstorm:2024.1.2
-
cpe:2.3:a:jetbrains:phpstorm:2024.1.3