VULNERABILITY INTELLIGENCE

CVE-2026-75044

CVSS score8.1 HIGH

EPSS probability0.42%

CISA KEVNot currently listed

Published2026-08-17

Last modified2026-09-15

Description

In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint