← Database

CVE-2026-86478

CRITICAL CVSS: 9.8 Published: 2026-09-07 Modified: 2026-09-09

Description

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address

Affected Platforms

Unknown

Weakness Type

CWE-290

References