CVE-2026-75044 in YouTrack

Riassunto

di MITRE • 17/08/2026

In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: JetBrains
• Prenotare: 17/08/2026
• Divulgazione: 17/08/2026
• Moderazione: accettato
• Voce: VDB-391328
• CPE: pronto
• CWE: CWE-306 (confermato)
• CVSS: 8.1 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Chemical, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-75044
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75044
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-75044/