EUVD-2026-39656

In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details...

EUVD-2026-39657

In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags...

EUVD-2026-39654

In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible...

CVE-2026-57926

In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack...

CVE-2026-57923

CVE-2026-57923 affects JetBrains YouTrack prior to 2026.2.16593. The issue is an improper authorization flaw in the app configurations endpoint that permits modifying project settings. According to the record, the vulnerability has a CVSS 3.1 base score of 5.3 (Medium) with network attack vector,...