JetBrains YouTrack < 2026.2.18991 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18991. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification template...

CVE-2026-100260

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...

CVE-2026-100260

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...

CVE-2026-100260

In JetBrains YouTrack versions prior to 2026.2.18991 , a vulnerability exists in the mailbox integration that allowed authentication to persist or occur after a password reset . The vulnerability carries a CVSS 3.1 score of 5.3 (Medium) , indicating a network-based attack vector with low complexi...

EUVD-2026-90004

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...

CVE-2026-100260: Initialization of a Resource with an Insecure Default

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...

PT-2026-103307

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Mailbox integration allows authentication to persist or be performed after a password reset has occurred. Recommendations Update to version 2026.2.18991...