CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 30/09/2026 |
| CVE-2026-100271 | 낮음2.7 | In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from other projects | 30/09/2026 |
| CVE-2026-100270 | 낮음2.7 | In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations | 30/09/2026 |
| CVE-2026-100269 | 보통4.3 | In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed | 30/09/2026 |
| CVE-2026-100268 | 낮음2.7 | In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates | 30/09/2026 |
| CVE-2026-100267 | 보통5.9 | In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters | 30/09/2026 |
| CVE-2026-100266 | 보통6.5 | In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address | 30/09/2026 |
| CVE-2026-100265 | 보통6.5 | In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation | 30/09/2026 |
| CVE-2026-100264 | 낮음2.7 | In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host | 30/09/2026 |
| CVE-2026-100263 | 보통6.1 | In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible | 30/09/2026 |
| CVE-2026-100262 | 높음7.1 | In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates | 30/09/2026 |
| CVE-2026-100261 | 보통5.4 | In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission | 30/09/2026 |
| CVE-2026-100260 | 보통5.3 | In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset | 30/09/2026 |
| CVE-2026-100259 | 보통4.3 | In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access | 30/09/2026 |
| CVE-2026-100258 | 보통4.3 | In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings | 30/09/2026 |
| CVE-2026-100257 | 보통4.3 | In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export | 30/09/2026 |
| CVE-2026-100256 | 높음7.8 | In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects | 30/09/2026 |