CVE-2026-86480PATCHED

jetbrains · hub

CVE-2026-86480: In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser pri

Description

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges

Affected Products

Vendor	Product	Versions
jetbrains	hub	0

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Related News (1 articles)

Tier C

VulDB16d ago

CVE-2026-86480 | JetBrains Hub up to 2026.2.52441 privileges management

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

2026.2.52442

CWECWE-306

PublishedSep 7, 2026

Last enriched16d ago

Trending Score7

Source articles1

Independent1

Info Completeness5/14

Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-63077EXPKEV

CVE-2026-63077: In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin

Trending: 168

CRITICALCVE-2026-86478

CVE-2026-86478: In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent

Trending: 10

HIGHCVE-2026-86502

CVE-2026-86502: In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code ex

Trending: 7

HIGHCVE-2026-86479

CVE-2026-86479: In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restric

Trending: 7

HIGHCVE-2026-86482

CVE-2026-86482: In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation

Trending: 7

Pin to Dashboard

Verification

State: verified

Confidence: 0%

Vulnerability Timeline

CVE Published

Sep 7, 2026

Discovered by ZDM

Sep 7, 2026

Patch Available

Sep 9, 2026