Canada issues two JetBrains vulnerability advisories

Canada's Cyber Centre issued two October 2026 advisories urging updates for JetBrains Exposed, Datalore, Junie CLI, TeamCity, and YouTrack, with no CVEs or exploitation reported.

On October 13, 2026, the Canadian Centre for Cyber Security published advisory AV26-1032, stating that as of October 9, 2026, JetBrains Exposed versions before 1.5.1 are vulnerable. The centre urged users and administrators to review JetBrains' security fix notice and apply updates. On October 15, 2026, it issued a separate advisory, AV26-1050, covering vulnerabilities in Datalore before 2026.2.1, Junie CLI before 26.8.3, TeamCity before 2026.2, 2026.1.4, and 2025.11.8, and several YouTrack builds before the listed 2026.2 and 2026.3 fixes. Neither notice names CVE identifiers or reports exploitation, and both tell administrators to review JetBrains security posts and update. The reports do not contradict each other; they describe different advisories and products.

• On October 13, 2026, the Canadian Centre for Cyber Security published advisory AV26-1032.
• As of October 9, 2026, JetBrains Exposed versions before 1.5.1 are affected; users are told to review JetBrains' fix notice and update.
• On October 15, 2026, the centre issued advisory AV26-1050 covering other JetBrains products.
• AV26-1050 lists Datalore before 2026.2.1 and Junie CLI before 26.8.3 as affected.
• It also lists TeamCity before 2026.2, 2026.1.4, and 2025.11.8, plus several YouTrack builds before listed 2026.2 and 2026.3 fixes.
• Neither advisory names CVE identifiers or reports active exploitation; both urge administrators to apply available updates.