Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-14 | 2 | Disclosure1Patch1 |
| 2026-07-15 | 1 | Patch1 |
JetBrains vulnerabilities patched: CVE-2026-62422 (CVSS 10) YouTrack authentication bypass, IntelliJ IDEA RCE CVE-2026-59792, and four TeamCity flaws. #JetBrains #YouTrack #IntelliJIDEA #TeamCity #CVE http://securityonline.info/jetbrains-vulnerabilities/
Post summary
JetBrains released patches for several high‑severity CVEs, including authentication bypass and RCE bugs, but provides no PoC or active exploitation details.
🚨 CRITICAL - JetBrains YouTrack authentication bypass via direct DB access (CVE-2026-62422) JetBrains YouTrack contains an authentication bypass affecting the core authentication/session handling logic when an attacker can directly access the underlying database. The root cause is improper authentication/authorization enforcement and trust of database-stored identity/session state (auth bypass class). An attacker who gains direct database access (e.g., exposed DB service, stolen DB creds, or access via another compromised host) can manipulate or forge auth-related records to log in without valid credentials. Successful exploitation can result in full administrative access, enabling takeover of projects, user management, configuration changes, and potential data exposure across the instance. 👉 Affected: JetBrains YouTrack < 2026.1.13757, < 2025.3.148033, < 2025.2.148048, < 2025.1.148120, < 2024.3.148430, < 2024.2.148429 | Upgrade to 2026.1.13757 / 2025.3.148033 / 2025.2.148048 / 2025.1.148120 / 2024.3.148430 / 2024.2.148429
Post summary
JetBrains YouTrack suffers an authentication bypass via direct database access, allowing attackers with DB access to forge credentials and gain full admin rights; the issue is mitigated by upgrading to the specified secure versions.
🔓 JetBrains YouTrack: CVSS 10 auth bypass via direct database access grants full admin control. CVE-2026-62422 affects multiple versions — patch to 2026.1.13757+ now. #JetBrains #infosec https://secalerts.co/vulnerability/CVE-2026-62422?utm_campaign=x https://t.co/K6wU1Yn8C7
Post summary
JetBrains announced an auth bypass (CVE-2026-62422) with a CVSS score of 10; a patch (2026.1.13757+) has been released to address it.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jetbrains | youtrack | - | - | - |