BaselineWatch
Desk

CVE-2026-75049

6.5 medium SSVC exploitation: none Analyzed

In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 6.5 · jetbrainsNVD modified 2026-10-23 16:10

Affected (CPE criteria) 1

  • cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*

References 1