Veille CVE

Mercredi 30 septembre 2026

22 CVE

Critique 2 Élevée 2 Moyenne 14 Faible 4 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « JetBrains YouTrack » ✕
  1. CVE-2026-100280 4.3 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible

  2. CVE-2026-100279 6.5 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials

  3. CVE-2026-100278 4.9 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments

  4. CVE-2026-100277 9.8 Critique

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature

  5. CVE-2026-100276 7.5 Élevée

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action

  6. CVE-2026-100275 4.8 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible

  7. CVE-2026-100274 6.5 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template

  8. CVE-2026-100273 9.8 Critique

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution

  9. CVE-2026-100272 4.9 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues

  10. CVE-2026-100271 2.7 Faible

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from other projects

  11. CVE-2026-100270 2.7 Faible

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations

  12. CVE-2026-100269 4.3 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed

  13. CVE-2026-100268 2.7 Faible

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates

  14. CVE-2026-100267 5.9 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters

  15. CVE-2026-100264 2.7 Faible

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host

  16. CVE-2026-100263 6.1 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible

  17. CVE-2026-100262 7.1 Élevée

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates

  18. CVE-2026-100261 5.4 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission

  19. CVE-2026-100260 5.3 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset

  20. CVE-2026-100259 4.3 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access

  21. CVE-2026-100258 4.3 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings

  22. CVE-2026-100257 4.3 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export