CVE-2026-75044

—

CVSS 3.1

8.1 high

EPSS

<1%p14

Published

Aug 17, 2026 (29d ago)

Modified

Sep 15, 2026

Description

In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint

Vendors: jetbrains
Products: youtrack
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.