CVE-2026-86485
In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks
CVSS
3.3
Low
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Sep 7, 2026 · Last modified: Sep 7, 2026 · CWE-291
Not enough EPSS history yet.
In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks
No related CVEs by CWE or product.