CVE-2026-57921

—

CVSS 3.1

7.5 high

EPSS

<1%p22

Published

Jun 26, 2026 (Jun 26, 2026)

Modified

Jun 27, 2026

Description

In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint

Vendors: jetbrains
Products: youtrack
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.