CVE-2026-123329: Medium severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actions

Event History

Nov 6, 2026

CVE Published

via MITRE·10:28 AM

Data Sourced

via MITRE·10:28 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which versions require remediation?

YouTrack versions before 2026.2.19562 are affected. Updating to 2026.2.19562 or later addresses the issue.

What access would an attacker need?

Exploitation requires low-level authenticated privileges. It does not require user interaction and can be attempted over the network.

What is the expected security impact?

The issue can expose actions belonging to other projects through the TeamCity integration. The supplied severity vector indicates low confidentiality and integrity impact, with no availability impact.

CVE-2026-123329: Medium severity vulnerability

Event History

Frequently Asked Questions

Which versions require remediation?

What access would an attacker need?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Which versions require remediation?

What access would an attacker need?

What is the expected security impact?