{"metadata": {"vulnerability": "CVE-2026-118697", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-28T18:33:13.794Z", "date_only": false, "value": "2026-10-28T18:33:13.794Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-118697", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": false, "value": "2026-10-30T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-118697", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": false, "value": "2026-10-30T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-118697", "record": "FKIE_CVE-2026-118697", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-30T17:31:26.886Z", "date_only": false, "value": "2026-10-30T17:31:26.886Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-118697", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T17:31:26.886Z", "date_only": false, "value": "2026-10-30T17:31:26.886Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / JetBrains", "record": "CVE-2026-118697", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T17:46:07.583Z", "date_only": false, "value": "2026-10-30T17:46:07.583556Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117531106812660892", "record": "CVE-2026-118697", "field": "creation_timestamp", "uuid": "dd511fa8-3df5-44ac-b3cc-837a97723800", "content": "CVE-2026-118697  In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates\nhttps://www.cve.org/CVERecord?id=CVE-2026-118697https://www.jetbrains.com/privacy-security/issues-fixed/https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/https://emudhra.com/en/post/certificate-security-incidenthttps://bugzilla.mozilla.org/show_bug.cgi?id=2083449#jetbrains #JetBrains #ToolboxApp #IntelliJIDEA#CVE_2026_118697#bot", "url": "https://infosec.exchange/users/cve/statuses/117531106812660892"}, {"timestamp": "2026-10-30T18:17:24Z", "date_only": false, "value": "2026-10-30T18:17:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C9GR-394R-65GG", "record": "GHSA-C9GR-394R-65GG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-30T18:17:24.687Z", "date_only": false, "value": "2026-10-30T18:17:24.687", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-118697", "record": "FKIE_CVE-2026-118697", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T18:32:44Z", "date_only": false, "value": "2026-10-30T18:32:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C9GR-394R-65GG", "record": "GHSA-C9GR-394R-65GG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T18:32:44Z", "date_only": false, "value": "2026-10-30T18:32:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C9GR-394R-65GG", "record": "GHSA-C9GR-394R-65GG", "field": "modified"}, {"timestamp": "2026-10-30T18:48:07.086Z", "date_only": false, "value": "2026-10-30T18:48:07.086780Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cpnsbgytjggpa", "record": "CVE-2026-118697", "field": "creation_timestamp", "uuid": "2dcb495d-c289-4efb-a722-3e79eaa87992", "content": "CVE-2026-118697 - JetBrains Toolbox and IntelliJ IDEA Improper Certificate Validation Vulnerability\nCVE ID : CVE-2026-118697\n \n Published : Oct. 30, 2026, 5:31 p.m. | 29\u00a0minutes ago\n \n Description : In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 a...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/cpnsbgytjggpa"}, {"timestamp": "2026-10-30T19:32:45.894Z", "date_only": false, "value": "2026-10-30T19:32:45.894556Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/bpyr7oxevm7x2", "record": "CVE-2026-118697", "field": "creation_timestamp", "uuid": "b2102b6e-1f3e-45b0-8119-4b7e969f1b2b", "content": "\ud83d\udea8 CVE-2026-118697\nAffected product: see description\nCVSS 9.0 / KEV: No\nTL;DR: In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised interm\u2026\nhttps://cvesentinel.com/report/CVE-2026-118697\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/bpyr7oxevm7x2"}, {"timestamp": "2026-10-30T21:10:04.515Z", "date_only": false, "value": "2026-10-30T21:10:04.515519Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mz4ow6uyyh2w", "record": "CVE-2026-118697", "field": "creation_timestamp", "uuid": "84f0782c-65c5-4e34-907f-3594d71f8a9a", "content": "CVE-2026-118697 - toolbox app\nThe JetBrains Toolbox App (versions before 3.9.1 and 3.8.2) and IntelliJ IDEA (versions before 2026.3 and 2026.2.4) can mistakenly accept forged security certificates. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#toolboxapp #jetbrains #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mz4ow6uyyh2w"}, {"timestamp": "2026-10-31T03:56:43.047Z", "date_only": false, "value": "2026-10-31T03:56:43.047Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-118697", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-31T03:56:43.047Z", "date_only": false, "value": "2026-10-31T03:56:43.047Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-118697", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-31T04:18:17.543Z", "date_only": false, "value": "2026-10-31T04:18:17.543", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-118697", "record": "FKIE_CVE-2026-118697", "field": "lastModified"}, {"timestamp": "2026-10-31T08:40:00.403Z", "date_only": false, "value": "2026-10-31T08:40:00.403360Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mz5vhueyms2q", "record": "CVE-2026-118697", "field": "creation_timestamp", "uuid": "4faaee2f-698d-441e-9bd7-ceeb6e847d1a", "content": "Install the latest JetBrains security update to fix critical JetBrains IDE vulnerabilities CVE-2026-118697 and CVE-2026-118696 affecting trusted certificates.\n\n#JetBrains #IntelliJIDEA #Cybersecurity #Vulnerability #eMudhra #InfoSec #AppSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mz5vhueyms2q"}], "metrics": {"as_of": "2026-11-02T10:21:13.965Z", "anchors": {"origin": {"timestamp": "2026-10-30T17:31:26.886Z", "date_only": false, "value": "2026-10-30T17:31:26.886Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-118697", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-30T17:31:26.886Z", "date_only": false, "value": "2026-10-30T17:31:26.886Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-118697", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 233387.079571, "hours": 64.82974432527779, "days": 2.7012393468865743, "min_seconds": 233387.079571, "max_seconds": 233387.079571, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-30T17:31:26.886Z", "date_only": false, "value": "2026-10-30T17:31:26.886Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-118697", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T10:21:13.965Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}