macOS · Application version · October 29, 2026

WebStorm 2026.2.4

WebStorm 2026.2.4, released October 29, 2026, fixes 2 CVEs in WebStorm. None of them is reported as exploited. Patch Radar priority: Urgent. The latest WebStorm is 2026.3, which also fixes every one of these CVEs.

Urgent

Superseded. The latest WebStorm is 2026.3, which also fixes every CVE on this page. Install that instead.

CVEs closed

1 rated Critical

Exploited

None reported

Highest CVSS

9.0

Base score, 0 to 10

Highest EPSS

0.0029

21st percentile

Priority of the 2 CVEs

Patch now 0
                                Urgent 1
                                High 1
                                Routine 0

Applies to

Product	Version
WebStorm	2026.2.4

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-118697	WebStorm and 11 others: Improper Certificate Validation	9.0	0.0029	None reported
High	CVE-2026-118696	WebStorm and 12 others: Improper Check for Certificate Revocation	8.0	0.0027	None reported

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.