CVE-2026-86496: Medium severity JetBrains YouTrack vulnerability
Published Sep 7, 2026
·Updated
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses
Affected Software
1 affected component
JetBrains YouTrack<2026.2.18769
Event History
Sep 7, 2026
CVE Published
via MITRE·04:26 PM
Data Sourced
via MITRE·04:26 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs low-privileged access to a vulnerable YouTrack instance as an authorized Helpdesk reporter. No user interaction is required, and the issue is reachable over the network.
2
What information could be exposed?
The issue exposes email addresses of Helpdesk authorized reporters. The available data indicates confidentiality impact only; it does not indicate integrity or availability impact.
3
Which versions need remediation?
JetBrains YouTrack versions before 2026.2.18769 are affected. Upgrade to 2026.2.18769 or a later version.