Description
In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Hub | < 2026.2.52366 | 2026.2.52366 |
High · 7.7
CVE-2026-100266
EUVD-2026-90010GHSA-f59m-626g-488f
In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted a…
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by JetBrains