Veille CVE

Jeudi 1 octobre 2026

10 CVE

Critique 0 Élevée 3 Moyenne 7 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « JetBrains YouTrack » ✕
  1. CVE-2026-103497 5.5 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration

  2. CVE-2026-103496 5.4 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications

  3. CVE-2026-103495 4.3 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs

  4. CVE-2026-103494 6.6 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes

  5. CVE-2026-103493 8.1 Élevée

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible

  6. CVE-2026-103492 6.5 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments

  7. CVE-2026-103491 6.5 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues

  8. CVE-2026-103490 7.2 Élevée

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links

  9. CVE-2026-103489 5.4 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible

  10. CVE-2026-103488 7.1 Élevée

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues