CVE-2026-86478

Summary

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address

Affected Software

VendorProductVersion RangeStatus
JetBrainsYouTrack`0 < 2025.3.161254,
2026.1.14042`affected

Weaknesses

  • CWE-290: CWE-290

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References