AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-75044

JetBrains YouTrack: missing authorization

JetBrains

CVE-2026-75044 · Published Aug 17, 2026 · updated Sep 15, 2026

High8.1
Fix: upgrade to 2025.3.156085 or later (3 fixed versions below)
JetBrains advisory

In JetBrains YouTrack before 2025.3.156085,

2026.1.13914,

2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint

Affected versions

PackageAffectedFixed in
YouTrack
Product
< 2025.3.156085, 2026.1.13914, 2026.2.180952025.3.156085, 2026.1.13914, 2026.2.18095
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-862

More JetBrains advisories

All JetBrains
Medium 4.4Aug 17JetBrains PyCharm: code executionCVE-2026-75059fixed in 2026.2.1High 8.4Aug 17JetBrains PyCharm: remote code executionCVE-2026-75060fixed in 2026.2.1High 7.1Aug 17JetBrains YouTrack: denial of serviceCVE-2026-75050fixed in 2026.1.13901 +1High 8.1Aug 17JetBrains YouTrack: missing authorizationCVE-2026-75051fixed in 2026.2.17917Low 3.6Aug 17JetBrains IntelliJ IDEA: command injectionCVE-2026-75052fixed in 2026.2.1Medium 5.4Aug 17JetBrains IntelliJ IDEA: server-side request forgeryCVE-2026-75053fixed in 2026.2.1