High · 8.0 CVE-2026-86479 EUVD-2026-72495GHSA-fxcm-p8cw-r92m

In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resource…

Published Sep 7, 2026 · Updated Sep 9, 2026 · Assigned by JetBrains

Description

In JetBrains YouTrack before 2026.2.18788,
2026.1.14055,
2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR

Vendor	Product	Affected	Fixed
JetBrains	YouTrack	< 2026.2.18788, 2026.1.14055, 2025.3.161254	2026.2.18788, 2026.1.14055, 2025.3.161254

CNA	v3.1	8.0
EUVD	v3.1	8.0