CVE-2026-123330: Medium severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings

Event History

Nov 6, 2026

CVE Published

via MITRE·10:28 AM

Data Sourced

via MITRE·10:28 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need?

An attacker needs an authenticated account with read-only access. The vector is network-accessible, and no user interaction is required.

Which installations are affected?

JetBrains YouTrack versions before 2026.2.19562 are affected. Installations running 2026.2.19562 or later are not identified as affected by the provided information.

What can a successful attacker change?

A user limited to read-only access can change issue visibility settings, potentially affecting the confidentiality and integrity of issue access controls.

CVE-2026-123330: Medium severity vulnerability

Event History

Frequently Asked Questions

What access does an attacker need?

Which installations are affected?

What can a successful attacker change?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need?

Which installations are affected?

What can a successful attacker change?