CVE-2026-62422

Critical · CVSS 10.0

CVSS: 10.0; nvd
EPSS: 0.35%; 27th pct
KEV: No
Class: other; CWE-306

Description

In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Status: profiled · ingested 2026-08-12T18:00:50.000Z