CVE-2026-123857

Description

In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection

Affected Platforms

Weakness Type

CWE-611

References

• https://www.jetbrains.com/privacy-security/issues-fixed/