CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 06/10/2026 |
| CVE-2026-106218 | KRITISCH10.0 | In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | 06/10/2026 |
| CVE-2026-103497 | MITTEL5.5 | In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration | 01/10/2026 |
| CVE-2026-103496 | MITTEL5.4 | In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications | 01/10/2026 |
| CVE-2026-103495 | MITTEL4.3 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs | 01/10/2026 |
| CVE-2026-103494 | MITTEL6.6 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes | 01/10/2026 |
| CVE-2026-103493 | HOCH8.1 | In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible | 01/10/2026 |
| CVE-2026-103492 | MITTEL6.5 | In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments | 01/10/2026 |
| CVE-2026-103491 | MITTEL6.5 | In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues | 01/10/2026 |
| CVE-2026-103490 | HOCH7.2 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links | 01/10/2026 |
| CVE-2026-103489 | MITTEL5.4 | In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible | 01/10/2026 |
| CVE-2026-103488 | HOCH7.1 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues | 01/10/2026 |
| CVE-2026-100280 | MITTEL4.3 | In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible | 30/09/2026 |
| CVE-2026-100279 | MITTEL6.5 | In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials | 30/09/2026 |
| CVE-2026-100278 | MITTEL4.9 | In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments | 30/09/2026 |
| CVE-2026-100277 | KRITISCH9.8 | In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature | 30/09/2026 |
| CVE-2026-100276 | HOCH7.5 | In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action | 30/09/2026 |