CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 06/10/2026 |
| CVE-2026-106218 | 严重10.0 | In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | 06/10/2026 |
| CVE-2026-103497 | 中危5.5 | In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration | 01/10/2026 |
| CVE-2026-103496 | 中危5.4 | In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications | 01/10/2026 |
| CVE-2026-103495 | 中危4.3 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs | 01/10/2026 |
| CVE-2026-103494 | 中危6.6 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes | 01/10/2026 |
| CVE-2026-103493 | 高危8.1 | In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible | 01/10/2026 |
| CVE-2026-103492 | 中危6.5 | In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments | 01/10/2026 |
| CVE-2026-103491 | 中危6.5 | In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues | 01/10/2026 |
| CVE-2026-103490 | 高危7.2 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links | 01/10/2026 |
| CVE-2026-103489 | 中危5.4 | In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible | 01/10/2026 |
| CVE-2026-103488 | 高危7.1 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues | 01/10/2026 |
| CVE-2026-100280 | 中危4.3 | In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible | 30/09/2026 |
| CVE-2026-100279 | 中危6.5 | In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials | 30/09/2026 |
| CVE-2026-100278 | 中危4.9 | In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments | 30/09/2026 |
| CVE-2026-100277 | 严重9.8 | In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature | 30/09/2026 |
| CVE-2026-100276 | 高危7.5 | In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action | 30/09/2026 |