CVE-2026-100263

MEDIUM NVD

CVSS Score 4.7

Severity MEDIUM

Published Sep 30, 2026

Vendor unknown

Description

In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible