CVE-2026-123327: High severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions

Event History

Nov 6, 2026

CVE Published

via MITRE·10:28 AM

Data Sourced

via MITRE·10:28 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Does an attacker need an account or user interaction to exploit this issue?

No. The CVSS vector indicates the issue is remotely exploitable with low attack complexity, requires no privileges, and does not require user interaction.

Which versions should be upgraded?

Upgrade JetBrains YouTrack to version 2026.2.19562 or later. The issue affects versions before 2026.2.19562.

What is the expected security impact?

The issue can disclose issue descriptions. The provided severity vector indicates high confidentiality impact, with no stated integrity or availability impact.

CVE-2026-123327: High severity vulnerability

Event History

Frequently Asked Questions

Does an attacker need an account or user interaction to exploit this issue?

Which versions should be upgraded?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Does an attacker need an account or user interaction to exploit this issue?

Which versions should be upgraded?

What is the expected security impact?