CVE-2026-108550
SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authe
CVSS
8.8
Alta
EPSS
0.3%
p23
KEV
—
Exploit Today
7
0-100
Publicado: 10 de out. de 2026 · Última mod.: 16 de out. de 2026 · CWE-863
0.3%EPSS · 30 dias0.3%
2026-10-112026-11-05
SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other accounts by abusing the merge flow. Attackers can call the merge initiate endpoint with a target username or OAuth identity, receive the verification token directly, and confirm the merge to inherit the victim's API tokens, roles and namespace ownership.
- github.comhttps://github.com/iflytek/skillhub
- github.comhttps://github.com/iflytek/skillhub/blob/v0.2.21/server/skillhub-auth/src/main/java/com/iflytek/skillhub/auth/merge/AccountMergeService.java#L95-L109
- github.comhttps://github.com/iflytek/skillhub/commit/45228996c7dd67f9304dba5b221fef15138a7fc4
- github.comhttps://github.com/iflytek/skillhub/issues/921
- github.comhttps://github.com/iflytek/skillhub/releases/tag/v0.2.22
- www.vulncheck.comhttps://www.vulncheck.com/advisories/skillhub-before-0.2.22-account-takeover-via-account-merge-flow
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1233343.8 BAI—
———In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project9hCVE-2026-1233333.8 BAI—
———In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints9hCVE-2026-1233286.4 MÉD—
———In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab9hCVE-2026-1233267.1 ALT—
———In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension9hCVE-2026-1233247.7 ALT—
———In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible9hCVE-2026-1232993.1 BAI—
———In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible9h