News & Sicurezza

CVE ID :CVE-2026-86500 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86501 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log Severity: 2.8 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86502 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts Severity: 8.4 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86503 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching Severity: 3.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86504 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86498 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86489 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86496 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86495 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86494 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86492 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86491 Published : Sept. 7, 2026, 5:17 p.m. | 4 hours, 12 minutes ago Description :In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads Severity: 3.5 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...