CVE-2026-86498

Summary

In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission

Affected Software

VendorProductVersion RangeStatus
JetBrainsYouTrack`0 < 2025.3.160480,
2026.1.14047`affected

Weaknesses

  • CWE-863: CWE-863

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References