Vulnerability intelligence
CVE-2026-86478
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address
CVSS Score
9.8
Critical
EPSS — Exploit Probability
0.6%
Riskier than 48% of all CVEs · checked 2026-10-21
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Sep 8, 2026 · latest Sep 8, 2026
Coverage timeline
-
JetBrains Patches Critical Hub and YouTrack Flaws Enabling Takeoversecurityonline.info · Sep 8, 2026