Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-62422 | 9.8 critical | 1.0% | jetbrains, youtrack | In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible | Sat 24 Oct |
| CVE-2026-75050 | 6.5 medium | 1.0% | jetbrains, youtrack | In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters | Fri 23 Oct |
| CVE-2026-61492 | 6.1 medium | 1.0% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possible | Sun 25 Oct |
| CVE-2026-57926 | 9.8 critical | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack | Sun 25 Oct |
| CVE-2026-75048 | 8.2 high | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible | Fri 23 Oct |
| CVE-2026-75051 | 8.1 high | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible | Fri 23 Oct |
| CVE-2026-57921 | 7.5 high | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint | Sun 25 Oct |
| CVE-2026-57923 | 7.5 high | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings | Sun 25 Oct |
| CVE-2026-33392 | 7.2 high | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass | Mon 26 Oct |
| CVE-2026-75049 | 6.5 medium | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint | Fri 23 Oct |
| CVE-2026-111092 | 6.5 medium | 0.00% | no CPE yet | In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands | 16 Oct |
| CVE-2026-57922 | 5.3 medium | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible | Sun 25 Oct |
| CVE-2026-57924 | 5.3 medium | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details | Sun 25 Oct |
| CVE-2026-57925 | 5.3 medium | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags | Sun 25 Oct |
| CVE-2025-64773 | 3.7 low | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit | 18 Oct |
| CVE-2026-59791 | 3.5 low | 0.00% | jetbrains, youtrack | In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible | Sat 24 Oct |
16 of 16
Download these 16 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.