CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 26/06/2026 |
| CVE-2026-57925 | 中危5.3 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags | 26/06/2026 |
| CVE-2026-57924 | 中危5.3 | In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details | 26/06/2026 |
| CVE-2026-57923 | 高危7.5 | In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings | 26/06/2026 |
| CVE-2026-57922 | 中危5.3 | In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible | 26/06/2026 |
| CVE-2026-57921 | 高危7.5 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint | 26/06/2026 |
| CVE-2026-49386 | 中危6.5 | In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles on Planning Canvas | 29/05/2026 |
| CVE-2026-49385 | 中危6.5 | In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts | 29/05/2026 |
| CVE-2026-49370 | 高危7.5 | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests | 29/05/2026 |
| CVE-2026-49369 | 中危4.3 | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages | 29/05/2026 |
| CVE-2026-49368 | 中危5.4 | In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible | 29/05/2026 |
| CVE-2026-33392 | 高危7.2 | In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass | 17/04/2026 |
| CVE-2026-28193 | 中危5.3 | In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint | 25/02/2026 |
| CVE-2026-25846 | 中危6.5 | In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs | 09/02/2026 |
| CVE-2025-64773 | 低危3.7 | In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit | 11/11/2025 |
| CVE-2025-64685 | 高危7.5 | In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure | 10/11/2025 |
| CVE-2025-64684 | 高危7.5 | In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form | 10/11/2025 |