Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-25 | 2 | Disclosure2 |
| 2026-03-02 | 1 | General1 |
| 2026-03-05 | 1 | Disclosure1 |
⚠️ Vulnerabilidad en productos JetBrains ❗ CVE-2026-28193 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-jetbrains/ https://t.co/QPRtfj88Q6
Post summary
The statement announces a new vulnerability (CVE-2026-28193) affecting JetBrains products, providing a link for further information.
CVE-2026-28193 (CVSS:8.8, HIGH) is Analyzed. In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint..https://nvd.nist.gov/vuln/detail/CVE-2026-28193 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post highlights CVE-2026-28193 with a high CVSS score and a short technical description, but it does not provide any PoC, exploit code, active exploitation evidence, or patch information.
CVE-2026-28193 In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint https://www.cve.org/CVERecord?id=CVE-2026-28193
Post summary
The text indicates that JetBrains YouTrack versions prior to 2025.3.121962 allow apps to send requests to the app permissions endpoint, highlighting a potential vulnerability.
**CVE-2026-28193** pertains to a security flaw in **JetBrains YouTrack** prior to version **2025.3.121962**. The vulnerability allows **apps** (potentially malicious or compromised) to **send requests to the app permissions endpoint** without proper authorization. This could enable unauthorized actions affecting the application's permissions management. #Cybersecurity #CVE #HighSeverity #SecurityAlert #PrivilegeEscalation #AuthBypass #DDoS https://cvetodo.com/cve/CVE-2026-28193
Post summary
The post announces CVE-2026-28193, a JetBrains YouTrack privilege‑escalation flaw that allows unauthenticated apps to modify permissions via the app permissions endpoint.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jetbrains | youtrack | - | - | - |