AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-62422

JetBrains YouTrack: authentication bypass

JetBrains

CVE-2026-62422 · Published Jul 14, 2026 · updated Aug 12, 2026

Critical10.0
Fix: upgrade to 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2 or later
JetBrains advisory

In JetBrains YouTrack before 2026.1.13757,

2025.3.148033,

2025.2.148048,

2025.1.148120,

2024.3.148430,

2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

Affected versions

PackageAffectedFixed in
YouTrack
Product
< 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 22026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-306

More JetBrains advisories

All JetBrains
Low 3.5Jul 10JetBrains YouTrack: cross-site scriptingCVE-2026-61492fixed in 2026.2.17394Low 3.5Jul 10JetBrains YouTrack: clickjackingCVE-2026-59791fixed in 2026.2.17012Critical 9.6Jul 10JetBrains IntelliJ IDEA: code execution via path traversalCVE-2026-59792fixed in 2026.1.4 +1High 8.8Jul 10In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via...CVE-2026-59793fixed in 2026.1.2High 7.3Jul 10JetBrains TeamCity: cross-site scriptingCVE-2026-59794fixed in 2026.1.2High 8.1Jul 10JetBrains TeamCity: cross-site scriptingCVE-2026-59795fixed in 2026.1.2