CVE-2026-103492: Medium severity JetBrains YouTrack vulnerability
Published Oct 1, 2026
·Updated
In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments
Affected Software
1 affected component
JetBrains YouTrack<2026.2.19422
Event History
Oct 1, 2026
CVE Published
via MITRE·09:15 AM
Data Sourced
via MITRE·09:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
JetBrains YouTrack versions before 2026.2.19422 are affected. The issue is triggered through crafted PSD file attachments.
2
What access does an attacker need to exploit this issue?
The CVSS vector indicates low privileges are required and no user interaction is needed. The attack can be performed over the network with low complexity.
3
What is the impact of successful exploitation?
Successful exploitation can cause a denial of service. The provided vector indicates availability impact only, with no stated confidentiality or integrity impact.