CVE-2026-49368Disclosure(jetbrains / youtrack)

LOWCVSS 5.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • youtrack

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-29); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
youtrack

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-29: 1Mentions · 2026-06-10: 1Technical Details · 2026-05-29: 105-2906-10
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-291
Disclosure1
2026-06-101
General1
Full discourse2 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos JetBrains ❗ CVE-2026-49368 ❗ CVE-2026-49367 ❗ CVE-2026-49366 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-jetbrains/ https://t.co/Azn3MRuYcn

    Post summary

    The post merely lists three CVEs affecting JetBrains products and provides a link for further information, with no detailed technical, exploit, or mitigation details.

    0000082
    6.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-49368 In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible https://www.cve.org/CVERecord?id=CVE-2026-49368

    Post summary

    JetBrains YouTrack prior to version 2026.1.13162 has a stored XSS flaw in project notification templates (CVE‑2026‑49368); the post lacks PoC, exploit code, active usage claims, or patch information.

    00000162
    57.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appjetbrainsyoutrack---

Explore more