Zero Day MonitorZDM

← Back to list

7.5

CVE-2026-123327PATCHED

jetbrains · youtrack

CVE-2026-123327: In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue

Description

In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions

Affected Products

Vendor	Product	Versions
jetbrains	youtrack	0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
jetbrains	jetbrains you track	cert_advisory	90%

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Related News (2 articles)

Tier B

BSI Advisories12h ago

[NEU] [hoch] JetBrains You Track: Mehrere Schwachstellen

→ No new info (linked only)

Tier C

VulDB15h ago

CVE-2026-123327 | JetBrains YouTrack up to 2026.2.19422 Saved Query Endpoint missing authentication

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.5 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA KEV❌ No

Actively exploited❌ No

Patch available

2026.2.19562

CWECWE-862

PublishedNov 6, 2026

Last enriched14h agov2

Trending Score47

Source articles3

Independent2

Info Completeness9/14

Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-123325

CVE-2026-123325: In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible

HIGHCVE-2026-123302

CVE-2026-123302: In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted p

HIGHCVE-2026-123305

CVE-2026-123305: In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote

HIGHCVE-2026-123304

CVE-2026-123304: In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path

HIGHCVE-2026-123276

CVE-2026-123276: In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug pr

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Nov 6, 2026

Discovered by ZDM

Nov 6, 2026

Updated: affectedVersions, description

Nov 6, 2026

Patch Available

Nov 6, 2026

Version History

v2

Last enriched 14h ago

v2Tier C14h ago

Updated affected versions to include 2026.2.19422 and added more technical detail about the missing authentication vulnerability in the Saved Query Endpoint component

affectedVersionsdescription

via VulDB

v115h ago

Initial creation