CVE-2026-75044 in YouTrack

Sumário

de MITRE • 17/08/2026

In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsável: JetBrains
• Reservar: 17/08/2026
• Divulgação: 17/08/2026
• Moderação: aceite
• Entrada: VDB-391328
• CPE: pronto
• CWE: CWE-306 (confirmado)
• CVSS: 8.1 (CNA)
• EPSS: 0.00230
• KEV: não
• Atividades: muito baixo
• Sector: Finance, Pharma, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-75044
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75044
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-75044/