CVE-2026-86478

Nghiêm trọng 9.8 CWE-290 Công bố 00:17 08/09/2026

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tham khảo

https://www.jetbrains.com/privacy-security/issues-fixed/

Xem trên NVD ↗

PoC (2)

⚠ Chưa kiểm duyệt. Chỉ chạy trong máy ảo.

LHeiakim/CVE-2026-86478
★ 016 giờ trước

CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)
LHeiakim/CVE-2026-86478-PoC
★ 016 giờ trước

CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)