38194 matches found
CVE-2026-100268
In JetBrains YouTrack versions prior to 2026.2.19197 , project administrators could perform unauthorized data access by reading comments from other projects. This vulnerability is triggered via notification templates . The CVSS v3.1 score is 7.7 (High) , indicating a network-based attack with low...
CVE-2026-100262
A missing authorization flaw in JetBrains YouTrack before version 2026.2.18991 allows users with read-only project access to overwrite project notification templates . This vulnerability impacts the integrity of project communications. No specific exploit details or remediation steps are provided...
CVE-2026-100262
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates...
EUVD-2026-90006
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates...
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. References 4. Learn More Microsoft Threat Intelligence identified and tracked exploitation of CVE-2026-73570 , an unauthenticated OS command injection vulnerability in the Zimbra Collaboration Suite SNMP notificatio...
CVE-2026-93514
Unauthenticated Cross Site Scripting XSS in Notification for Telegram = 3.5.2 versions...
EUVD-2026-89824
Unauthenticated Cross Site Scripting XSS in Notification for Telegram = 3.5.2 versions...
CVE-2026-93514
The Notification for Telegram WordPress plugin (versions
CVE-2026-93514 WordPress Notification for Telegram plugin <= 3.5.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Notification for Telegram = 3.5.2 versions...
CVE-2026-93514 WordPress Notification for Telegram plugin <= 3.5.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Notification for Telegram = 3.5.2 versions...
CVE-2026-100275: Improper Neutralization of Input During Web Page Generation
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...
CVE-2026-100262: Incorrect Authorization
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates...
PT-2026-103322
🚨 CVE-2026-100275 In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible 🎖@cveNotify...
PT-2026-103321
🚨 CVE-2026-100274 In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template 🎖@cveNotify...
CVE-2026-100268: Authorization Bypass Through User-Controlled Key
In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates...
PT-2026-103156
Unauthenticated Cross Site Scripting XSS in Notification for Telegram = 3.5.2 versions...
PT-2026-103324
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.19197 Description An issue exists that allows account takeover by replaying a notification signature. Recommendations Update to version 2026.2.19197...
CVE-2026-102142: Improper Neutralization of Special Elements Used in a Template Engine
A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance...
PT-2026-103309
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Missing authorization allows users with read-only project access to overwrite project notification templates. Recommendations Update to version 2026.2.18991...