CVE-2026-100280: Low severity JetBrains YouTrack vulnerability
Published Sep 30, 2026
·Updated
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible
Affected Software
1 affected component
JetBrains YouTrack<2026.2.19197
Event History
Sep 30, 2026
CVE Published
via MITRE·03:17 PM
Data Sourced
via MITRE·03:17 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs network access and low-privileged access to YouTrack. Exploitation also requires the attacker to create a project using a custom template that is unreadable to them.
2
Which deployments are affected?
JetBrains YouTrack versions before 2026.2.19197 are affected. The provided information does not state whether unreadable custom templates can exist in a default configuration.
3
What is the security impact?
Successful exploitation can expose limited confidential information. The provided CVSS vector indicates no integrity or availability impact.