CVE-2022-25262

CVE-2022-25262 PoC + detalles de la vulnerabilidad CVE-2022-25262 | JetBrains Hub: toma de control de la respuesta SAML con un solo clic CVE-2022-25262 Requisitos Uso ¿Cómo funciona? Pool de códigos de autorización para el intercambio «OAuth2 - SAML» Apropiación del código de autorización OAuth2 ...

CVE-2022-25260

CVE-2022-25260 SSRF server-side request forgery semi-ciego pre-autenticación en JetBrains Hub Requisitos JetBrains Hub 2021.1.14276 JetBrains Hub anterior a 2021.1.14276 era vulnerable a un control de acceso inadecuado CVE-2022-34894, que permite a un atacante crear servicios no confiables sin...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

CVE-2026-86480

JetBrains Hub prior to version 2026.2.52442 is affected by a privilege escalation vulnerability. An unauthenticated attacker over the network could register a trusted service and subsequently gain superuser privileges , resulting in full compromise of confidentiality, integrity, and availability ...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

EUVD-2026-72496

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

PT-2026-86852

🚨Critical - JetBrains Hub Unauth Trusted Service Registration PrivEsc CVE-2026-86480 JetBrains Hub exposes a critical trusted-service registration endpoint where the service trust flag can be set without authentication. An unauthenticated attacker can register a malicious trusted service, then...

CVE-2026-86480: Missing Authentication for Critical Function

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

The vulnerability of the JetBrains Hub account management software lies in errors in the code of the pseudo-random number generator used for generating host keys. This allows a hacker to gain full control over the application.

The vulnerability of the JetBrains Hub account management software is related to errors in the code of the pseudorandom number generator used for generating host keys. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application...

The vulnerability of the JetBrains YouTrack project management tool and the JetBrains Hub account management software is related to the lack of authentication for a critical function. This allows attackers to bypass security restrictions, gain unauthorized access to protected information, and increase their privileges.

The vulnerability of the JetBrains YouTrack project management tool and the JetBrains Hub account management software is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker to bypass security restrictions, gain unauthorized access to...

The vulnerability of the JetBrains Hub software management system lies in the insufficient control over the modification of dynamically defined object characteristics. This allows attackers to circumvent security restrictions, gain unauthorized access to protected information, and enhance their privileges.

The vulnerability of the JetBrains Hub account management software is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions, gain unauthorized access to protected...

CVE-2026-56142

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible...

CVE-2026-56141

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible...

CVE-2026-50242

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible...

CVE-2026-50242

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible...

CVE-2026-50242

JetBrains Hub is affected by an authentication bypass vulnerability in versions listed (before 2026.1.13757; 2025.3.148033; 2025.2.148048; 2025.1.148120; 2024.3.148430; 2024.2.148429). The issue allows bypass via direct database access, leading to administrative access. The CVSS metrics indicate ...

CVE-2026-50242

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible...

EUVD-2026-38008

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible...

CVE-2026-50242

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible...