JetBrains YouTrack < 2026.2.19575 / 2026.3.x < 2026.3.16075 Missing Authorization (CVE-2026-111092)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19575, or 2026.3.x prior to 2026.3.16075. It is, therefore, affected by a missing authorization vulnerability: - In JetBrains YouTrack before 2026.2.19575, 2026.3.16075, 2026.3.16397, 2026.3.16402 mail rules allowed...

CVE-2022-24442

CVE-2022-24442: FreeMarker Server-Side Template Injection in JetBrains YouTrack By inserting malicious content in the Notification FTL files, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE...

CVE-2026-111092

In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands...

PT-2026-114988

🚨 CVE-2026-111092 In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands 🎖@cveNotify...

JetBrains YouTrack < 2026.2.18991 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18991. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification template...

JetBrains YouTrack < 2026.2.19197 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19197. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature. CVE-2026-100277 - In JetBrains YouTrack...

CVE-2026-103495

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103494

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes...

CVE-2026-103490

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links...

CVE-2026-103493

In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

EUVD-2026-90588

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

CVE-2026-103497

The JetBrains YouTrack application is affected by a Server-Side Request Forgery (sSRF) vulnerability in versions prior to 2026.2.19422 . The flaw exists within the GitHub VCS integration , potentially allowing an attacker to make requests from the server. No specific exploit details or proof-of-c...

CVE-2026-103497

In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration...

EUVD-2026-90586

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...

CVE-2026-103494

JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to a privilege escalation flaw. This vulnerability is triggered through user group membership changes . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is available in v...

CVE-2026-103493

In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible...

EUVD-2026-90585

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes...

CVE-2026-103494

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes...