CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 26/06/2026 |
| CVE-2026-57925 | 보통5.3 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags | 26/06/2026 |
| CVE-2026-57924 | 보통5.3 | In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details | 26/06/2026 |
| CVE-2026-57923 | 높음7.5 | In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings | 26/06/2026 |
| CVE-2026-57922 | 보통5.3 | In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible | 26/06/2026 |
| CVE-2026-57921 | 높음7.5 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint | 26/06/2026 |
| CVE-2026-49386 | 보통6.5 | In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles on Planning Canvas | 29/05/2026 |
| CVE-2026-49385 | 보통6.5 | In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts | 29/05/2026 |
| CVE-2026-49370 | 높음7.5 | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests | 29/05/2026 |
| CVE-2026-49369 | 보통4.3 | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages | 29/05/2026 |
| CVE-2026-49368 | 보통5.4 | In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible | 29/05/2026 |
| CVE-2026-33392 | 높음7.2 | In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass | 17/04/2026 |
| CVE-2026-28193 | 보통5.3 | In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint | 25/02/2026 |
| CVE-2026-25846 | 보통6.5 | In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs | 09/02/2026 |
| CVE-2025-64773 | 낮음3.7 | In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit | 11/11/2025 |
| CVE-2025-64685 | 높음7.5 | In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure | 10/11/2025 |
| CVE-2025-64684 | 높음7.5 | In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form | 10/11/2025 |