https://cvealert.net/products/youtrack/Recent content in Youtrack on CVE Alert & Security FeedHugoen-usThu, 01 Oct 2026 10:17:15 +0000https://cvealert.net/posts/cve-2026-103495/Thu, 01 Oct 2026 10:17:15 +0000https://cvealert.net/posts/cve-2026-103495/In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogshttps://cvealert.net/posts/cve-2026-103496/Thu, 01 Oct 2026 10:17:15 +0000https://cvealert.net/posts/cve-2026-103496/In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users’ notificationshttps://cvealert.net/posts/cve-2026-103497/Thu, 01 Oct 2026 10:17:15 +0000https://cvealert.net/posts/cve-2026-103497/In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integrationhttps://cvealert.net/posts/cve-2026-103491/Thu, 01 Oct 2026 10:17:14 +0000https://cvealert.net/posts/cve-2026-103491/In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issueshttps://cvealert.net/posts/cve-2026-103492/Thu, 01 Oct 2026 10:17:14 +0000https://cvealert.net/posts/cve-2026-103492/In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachmentshttps://cvealert.net/posts/cve-2026-103493/Thu, 01 Oct 2026 10:17:14 +0000https://cvealert.net/posts/cve-2026-103493/In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possiblehttps://cvealert.net/posts/cve-2026-103494/Thu, 01 Oct 2026 10:17:14 +0000https://cvealert.net/posts/cve-2026-103494/In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes