Vulnerability Details CVE-2026-64809
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 3.8%
CVSS Severity
CVSS v3 Score 8.4
Products affected by CVE-2026-64809
-
cpe:2.3:a:jetbrains:phpstorm:2021.3.1
-
cpe:2.3:a:jetbrains:phpstorm:2023.1
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.0
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.1
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.2
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.3
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.4
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.5
-
cpe:2.3:a:jetbrains:phpstorm:2023.1.6
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.0
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.1
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.2
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.3
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.4
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.5
-
cpe:2.3:a:jetbrains:phpstorm:2023.2.6
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.0
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.1
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.2
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.3
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.4
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.5
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.6
-
cpe:2.3:a:jetbrains:phpstorm:2023.3.7
-
cpe:2.3:a:jetbrains:phpstorm:2024.1.0
-
cpe:2.3:a:jetbrains:phpstorm:2024.1.1
-
cpe:2.3:a:jetbrains:phpstorm:2024.1.2
-
cpe:2.3:a:jetbrains:phpstorm:2024.1.3