PULSEUnderground Intel

AO VIVO21sinais / 24h

FEED

ransomakira reclama a Hudson & Hudson SignProducts · US · Manufacturingransomshiba reclama a Istituto Borgo · IT · Otherransomakira reclama a Boyle, Pecharich, Cline, Whittington andStallings · Professional Servicesransomn0n reclama a Dompé Farmaceutici S.p.A. · IT · Healthcareransomn0n reclama a Cogent Biosciences, Inc. · US · Healthcareransomn0n reclama a Chartboost LLC · US · Technologyransomn0n reclama a Centrepoint · SA · Energy & Utilitiesransomn0n reclama a Resource Consultants · US · Professional Servicesransomqilin reclama a Rotstein & Shiffman · IL · Professional Servicesransomn0n reclama a Max Fashion · AE · Retail & E-Commerceransomn0n reclama a Hallmark Cards, Inc. · US · Retail & E-Commerceransomn0n reclama a Scry Analytics · US · Technologyransomvexy ransomware reclama a ZipAI · VN · Technologyransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomakira reclama a Hudson & Hudson SignProducts · US · Manufacturingransomshiba reclama a Istituto Borgo · IT · Otherransomakira reclama a Boyle, Pecharich, Cline, Whittington andStallings · Professional Servicesransomn0n reclama a Dompé Farmaceutici S.p.A. · IT · Healthcareransomn0n reclama a Cogent Biosciences, Inc. · US · Healthcareransomn0n reclama a Chartboost LLC · US · Technologyransomn0n reclama a Centrepoint · SA · Energy & Utilitiesransomn0n reclama a Resource Consultants · US · Professional Servicesransomqilin reclama a Rotstein & Shiffman · IL · Professional Servicesransomn0n reclama a Max Fashion · AE · Retail & E-Commerceransomn0n reclama a Hallmark Cards, Inc. · US · Retail & E-Commerceransomn0n reclama a Scry Analytics · US · Technologyransomvexy ransomware reclama a ZipAI · VN · Technologyransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Services

← Todos os CVEs

CVE Watch6 de nov. de 2026

CVE-2026-123296

In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible

CVSS

7.5

Alta

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 6 de nov. de 2026 · Última mod.: 6 de nov. de 2026 · CWE-863

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible

Referências oficiais

www.jetbrains.comhttps://www.jetbrains.com/privacy-security/issues-fixed/

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1233343.8 BAI

———In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project6h CVE-2026-1233333.8 BAI

———In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints6h CVE-2026-1233286.4 MÉD

———In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab6h CVE-2026-1233267.1 ALT

———In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension6h CVE-2026-1233247.7 ALT

———In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible6h CVE-2026-1232993.1 BAI

———In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible6h