Tag
#JetBrains
CVE-2026-86478: Critical Authentication Bypass in JetBrains YouTrack
CVE-2026-86478 is a critical vulnerability in JetBrains YouTrack, allowing unauthenticated account takeover via self-asserted email addresses. With a CVSS score of 9.8, this vulnerability poses a significant risk to organizations using affected versions. Understanding the root cause and attack mechanics is crucial for defenders to implement effective mitigations.
CVE-2026-75044: JetBrains YouTrack Authorization Bypass Vulnerability
A vulnerability in JetBrains YouTrack before versions 2025.3.156085, 2026.1.13914, and 2026.2.18095 allows an authenticated user to delete arbitrary entities via the mailbox endpoint due to missing authorization. This vulnerability has a CVSS score of 8.1, indicating high severity. Affected organizations should update to a patched version immediately.
Critical Path Traversal Vulnerability in JetBrains IntelliJ IDEA
A critical vulnerability (CVE-2026-59792) with a CVSS score of 9.6 was discovered in JetBrains IntelliJ IDEA, allowing for code execution via path traversal in project workspace ID handling. Users of IntelliJ IDEA versions before 2026.1.4 and 2026.2 are affected. Immediate action is required to update to a patched version.