CVE-2026-64808: JetBrains Phpstorm

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling

Affected products

• JetBrains Phpstorm: before 2026.2.0 (fixed in 2026.2.0)

Published 2026-07-23. Last modified 2026-07-28.