Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-86490 EUVD-2026-72506GHSA-v3fg-v2j9-f7gp

In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint

Published Sep 7, 2026 · Updated Sep 8, 2026 · Assigned by JetBrains