CVE-2026-123858 | JetBrains PhpStorm up to 2026.2 Deployment unrestricted upload

November 6, 2026 Yanac

A vulnerability classified as critical has been found in JetBrains PhpStorm up to 2026.2. Impacted is an unknown function of the component Deployment. Performing a manipulation results in unrestricted upload.

This vulnerability is reported as CVE-2026-123858. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More