CVE-2026-100266

Description

In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address

References

• https://www.jetbrains.com/privacy-security/issues-fixed/