CVE-2026-123857

MEDIUM NVD

CVSS Score 4.3

Severity MEDIUM

Published Nov 06, 2026

Vendor unknown

Description

In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection