CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 06/10/2026 |
| CVE-2026-106218 | 심각10.0 | In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | 06/10/2026 |
| CVE-2026-103497 | 보통5.5 | In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration | 01/10/2026 |
| CVE-2026-103496 | 보통5.4 | In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications | 01/10/2026 |
| CVE-2026-103495 | 보통4.3 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs | 01/10/2026 |
| CVE-2026-103494 | 보통6.6 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes | 01/10/2026 |
| CVE-2026-103493 | 높음8.1 | In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible | 01/10/2026 |
| CVE-2026-103492 | 보통6.5 | In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments | 01/10/2026 |
| CVE-2026-103491 | 보통6.5 | In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues | 01/10/2026 |
| CVE-2026-103490 | 높음7.2 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links | 01/10/2026 |
| CVE-2026-103489 | 보통5.4 | In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible | 01/10/2026 |
| CVE-2026-103488 | 높음7.1 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues | 01/10/2026 |
| CVE-2026-100280 | 보통4.3 | In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible | 30/09/2026 |
| CVE-2026-100279 | 보통6.5 | In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials | 30/09/2026 |
| CVE-2026-100278 | 보통4.9 | In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments | 30/09/2026 |
| CVE-2026-100277 | 심각9.8 | In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature | 30/09/2026 |
| CVE-2026-100276 | 높음7.5 | In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action | 30/09/2026 |