CVE-2026-86479

Summary

In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR

Affected Software

VendorProductVersion RangeStatus
JetBrainsYouTrack`0 < 2026.2.18788,
2026.1.14055,
2025.3.161254`affected

Weaknesses

  • CWE-862: CWE-862

References