Advisories · Technology

JetBrains YouTrack.

Every CVE that names JetBrains YouTrack among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111092 CVE record

CVSS 6.5 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-103497 CVE record

CVSS 5.5 Medium

Server-side request forgery in JetBrains YouTrack
- JetBrains YouTrack
- Server-side request forgery (SSRF)
Not analysed yet 1 Oct 2026
CVE-2026-103496 CVE record

CVSS 5.4 Medium

Insecure direct object reference in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 1 Oct 2026
CVE-2026-103495 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 1 Oct 2026
CVE-2026-103494 CVE record

CVSS 6.6 Medium

JetBrains YouTrack: In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user…
- JetBrains YouTrack
- Privilege escalation
Not analysed yet 1 Oct 2026
CVE-2026-103493 CVE record

CVSS 8.1 High

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 1 Oct 2026
CVE-2026-103492 CVE record

CVSS 6.5 Medium

Infinite loop in JetBrains YouTrack
- JetBrains YouTrack
- Denial of service
Not analysed yet 1 Oct 2026
CVE-2026-103491 CVE record

CVSS 6.5 Medium

Insecure direct object reference in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 1 Oct 2026
CVE-2026-103490 CVE record

CVSS 7.2 High

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 1 Oct 2026
CVE-2026-103489 CVE record

CVSS 2.0 Low

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 1 Oct 2026
CVE-2026-103488 CVE record

CVSS 7.1 High

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 1 Oct 2026
CVE-2026-100280 CVE record

CVSS 3.1 Low

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100279 CVE record

CVSS 6.5 Medium

Server-side request forgery in JetBrains YouTrack
- JetBrains YouTrack
- Server-side request forgery (SSRF)
Not analysed yet 30 Sept 2026
CVE-2026-100278 CVE record

CVSS 4.9 Medium

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100277 CVE record

CVSS 8.9 High

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100276 CVE record

CVSS 5.9 Medium

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100275 CVE record

CVSS 6.9 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-100274 CVE record

CVSS 6.5 Medium

Resource allocation without limits in JetBrains YouTrack
- JetBrains YouTrack
- Denial of service
Not analysed yet 30 Sept 2026
CVE-2026-100273 CVE record

CVSS 8.2 High

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100272 CVE record

CVSS 4.9 Medium

Insecure direct object reference in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100271 CVE record

CVSS 2.7 Low

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100270 CVE record

CVSS 3.3 Low

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100269 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100268 CVE record

CVSS 7.7 High

Insecure direct object reference in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100267 CVE record

CVSS 5.9 Medium

Regular expression denial of service in JetBrains YouTrack
- JetBrains YouTrack
- Denial of service
Not analysed yet 30 Sept 2026
CVE-2026-100264 CVE record

CVSS 2.7 Low

Insufficiently protected credentials in JetBrains YouTrack
- JetBrains YouTrack
- Hard-coded credentials
Not analysed yet 30 Sept 2026
CVE-2026-100263 CVE record

CVSS 4.7 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-100262 CVE record

CVSS 7.6 High

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100261 CVE record

CVSS 5.4 Medium

Authentication bypass in JetBrains YouTrack
- JetBrains YouTrack
- Authentication bypass
Not analysed yet 30 Sept 2026
CVE-2026-100260 CVE record

CVSS 5.3 Medium

JetBrains YouTrack: In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication…
- JetBrains YouTrack
- CWE-1188
Not analysed yet 30 Sept 2026
CVE-2026-100259 CVE record

CVSS 4.3 Medium

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-100258 CVE record

CVSS 4.3 Medium

Information disclosure in JetBrains YouTrack
- JetBrains YouTrack
- Information disclosure
Not analysed yet 30 Sept 2026
CVE-2026-100257 CVE record

CVSS 4.3 Medium

Server-side request forgery in JetBrains YouTrack
- JetBrains YouTrack
- Server-side request forgery (SSRF)
Not analysed yet 30 Sept 2026
CVE-2026-86500 CVE record

CVSS 5.5 Medium

JetBrains YouTrack: In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with…
- JetBrains YouTrack
- Privilege escalation
Not analysed yet 7 Sept 2026
CVE-2026-86499 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86498 CVE record

CVSS 7.7 High

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86497 CVE record

CVSS 6.8 Medium

Information disclosure in JetBrains YouTrack
- JetBrains YouTrack
- Information disclosure
Not analysed yet 7 Sept 2026
CVE-2026-86496 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86495 CVE record

CVSS 6.5 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86494 CVE record

CVSS 7.7 High

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86493 CVE record

CVSS 6.5 Medium

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86492 CVE record

CVSS 8.5 High

JetBrains YouTrack: In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft…
- JetBrains YouTrack
- CWE-488
Not analysed yet 7 Sept 2026
CVE-2026-86491 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 7 Sept 2026
CVE-2026-86490 CVE record

CVSS 6.5 Medium

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86489 CVE record

CVSS 6.5 Medium

Insecure direct object reference in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86488 CVE record

CVSS 6.5 Medium

Insecure direct object reference in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86487 CVE record

CVSS 3.1 Low

Incorrect authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86486 CVE record

CVSS 3.7 Low

Missing authentication in JetBrains YouTrack
- JetBrains YouTrack
- Authentication bypass
Not analysed yet 7 Sept 2026
CVE-2026-86485 CVE record

CVSS 3.5 Low

JetBrains YouTrack: In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged…
- JetBrains YouTrack
- CWE-291
Not analysed yet 7 Sept 2026
CVE-2026-86484 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 7 Sept 2026
CVE-2026-86483 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 7 Sept 2026
CVE-2026-86482 CVE record

CVSS 8.8 High

JetBrains YouTrack: In JetBrains YouTrack before 2026.2.18634…
- JetBrains YouTrack
- Privilege escalation
Not analysed yet 7 Sept 2026
CVE-2026-86481 CVE record

CVSS 4.3 Medium

Insecure direct object reference in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86479 CVE record

CVSS 8.0 High

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 7 Sept 2026
CVE-2026-86478 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Authentication bypass by spoofing in JetBrains YouTrack
- JetBrains YouTrack
- Authentication bypass
Not analysed yet 7 Sept 2026
CVE-2026-75051 CVE record

CVSS 8.1 High

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 17 Aug 2026
CVE-2026-75050 CVE record

CVSS 7.1 High

Resource allocation without limits in JetBrains YouTrack
- JetBrains YouTrack
- Denial of service
Not analysed yet 17 Aug 2026
CVE-2026-75049 CVE record

CVSS 6.5 Medium

Missing authorization in JetBrains YouTrack
- JetBrains YouTrack
- Broken access control
Not analysed yet 17 Aug 2026
CVE-2026-75048 CVE record

CVSS 8.2 High

Cross-site scripting in JetBrains YouTrack
- JetBrains YouTrack
- Cross-site scripting (XSS)
Not analysed yet 17 Aug 2026
CVE-2026-75047 CVE record

CVSS 6.5 Medium

JetBrains YouTrack: In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression…
- JetBrains YouTrack
- CWE-409
Not analysed yet 17 Aug 2026