CVE-2026-86489

—

CVSS 3.1

6.5 medium

EPSS

<1%p10

Published

Sep 7, 2026 (8d ago)

Modified

Sep 8, 2026

Description

In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations

Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.