VulnSocial

CVE-2026-100277(jetbrains / youtrack)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature

jetbrains CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • youtrack

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
jetbrains
Products
youtrack

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-05: 110-05
Referenced assets1 URL
By indicator
Full discourse1 post
  • takenaka hiroya@Joe_Biden_ja

    AIセキュリティ日誌: JetBrains YouTrack 2026.2.19197 より前に、通知の署名をリプレイされるとアカウントを乗っ取られる CVE-2026-100277（CVSS 9.8）。修正版は 2026.2.19197。公開環境ほど更新を急いでください。 https://ai-news.autoarticles.net/article/post_1791128257052_alv7w4

    0000033
    555 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appjetbrainsyoutrack---

Explore more

Back to dashboardjetbrains CVEsyoutrack vulnerabilities