CVE-2026-86478Patch

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://www.jetbrains.com/privacy-security/issues-fixed/

Weakness type (CWE)

CWE-290

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 2 signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Patch

2100.0%

Referenced assets1 URL

By indicator

https://www.jetbrains.com/privacy-security/issues-fixed/

Full discourse2 posts

Rıdvan Yağlı@ridvanyagli46d
Patch
🚨 JetBrains ürünlerinde 6 yeni güvenlik açığı: 2 kritik CVSS 9.8 JetBrains; YouTrack, Hub, IntelliJ IDEA ve GoLand ürünlerini etkileyen 6 güvenlik açığını giderdi. CVE-2026-86478 — CVSS 9.8 YouTrack Helpdesk'te hatalı kimlik doğrulama nedeniyle kimlik doğrulama gerektirmeden hesap ele geçirme mümkün. CVE-2026-86480 — CVSS 9.8 JetBrains Hub'da kimlik doğrulama olmadan trusted service kaydedilerek Superuser yetkisi elde edilebiliyor. Diğer açıklar: • CVE-2026-86502 — CVSS 8.4 — IntelliJ IDEA • CVE-2026-86479 — CVSS 8.1 — YouTrack • CVE-2026-86504 — CVSS 7.8 — IntelliJ IDEA • CVE-2026-86506 — CVSS 5.9 — GoLand ⚠️ Şu an için bu 6 açığın aktif olarak istismar edildiğine dair doğrulanmış bilgi yok. YouTrack, Hub, IntelliJ IDEA veya GoLand kullanıyorsanız, etkilenen sürümleri kontrol edip güvenlik güncellemelerini uygulayın.
Post summary
JetBrains announced and patched six vulnerabilities across its products, detailing exploitation vectors and severity, while stating no verified active exploitation and urging users to apply the updates.
00041560
2.4K followersView on X
CCB Alert@CCBalert45d
Patch
Warning: Critical #JetBrains YouTrack & Hub flaws! #CVE-2026-86478 & #CVE-2026-86480 (CVSS: 9.8) allow unauthenticated attackers to hijack accounts & gain full superuser access. #Patch #Patch #Patch More info: https://www.jetbrains.com/privacy-security/issues-fixed/
Post summary
JetBrains YouTrack and Hub face critical CVE-2026-86478 and CVE-2026-86480 flaws permitting unauthenticated hijacking and superuser takeover; patches are available via the provided JetBrains privacy‑security link.
01000292
7.2K followersView on X

Explore more

Back to dashboard