CVE-2026-123324
In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible
CVSS
7.7
Alto
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 6 nov 2026 · Última mod.: 6 nov 2026 · CWE-863
Sin historial EPSS suficiente todavía.
In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1233343.8 BAJ—
———In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project7hCVE-2026-1233333.8 BAJ—
———In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints7hCVE-2026-1233286.4 MED—
———In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab7hCVE-2026-1233267.1 ALT—
———In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension7hCVE-2026-1232993.1 BAJ—
———In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible7hCVE-2026-1232967.5 ALT—
———In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible7h