← All advisories

Medium severity4.3NVD Advisory· Published Nov 6, 2026

CVE-2026-123857

CVE-2026-123857

Description

In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection

Affected products

1

Jetbrains/PhpStormllm-fuzzy
Range: <2026.3

Patches

Vulnerability mechanics

References

1

www.jetbrains.com/privacy-security/issues-fixed/nvd

News mentions

0

No linked articles in our index yet.

CVE-2026-123857 · Medium · VYPR