CVE-2026-123334
In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project
CVSS
3.8
Baixa
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 6 de nov. de 2026 · Última mod.: 6 de nov. de 2026 · CWE-863
Ainda não há histórico EPSS suficiente.
In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1233333.8 BAI—
———In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints5hCVE-2026-1233286.4 MÉD—
———In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab5hCVE-2026-1233267.1 ALT—
———In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension5hCVE-2026-1233247.7 ALT—
———In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible5hCVE-2026-1232993.1 BAI—
———In JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possible5hCVE-2026-1232967.5 ALT—
———In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible5h