CVE-2026-86493: Medium severity JetBrains YouTrack vulnerability

Q: What access would an attacker need to exploit this issue?

An attacker needs a low-privileged authenticated account, such as a read-only user. The vector indicates the issue can be exploited over the network without user interaction.

Q: What is the expected security impact?

The impact is limited to integrity: a read-only user could create or modify whiteboard cards despite their intended permissions. No confidentiality or availability impact is indicated by the provided vector.

Published Sep 7, 2026

Updated

In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards

Affected Software

1 affected component

JetBrains YouTrack<2026.2.18634

Event History

Sep 7, 2026

CVE Published

via MITRE·04:26 PM

Data Sourced

via MITRE·04:26 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access would an attacker need to exploit this issue?

An attacker needs a low-privileged authenticated account, such as a read-only user. The vector indicates the issue can be exploited over the network without user interaction.

What is the expected security impact?