CVE-2026-86486

In JetBrains YouTrack versions before 2026.2.18634 , the generic VCS webhook handler had a fail-open condition when its secret was blank, meaning the handler would not properly validate incoming webhook requests if no secret had been configured. This results in a low integrity impact with a high ...

EUVD-2026-72502

In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank...