CVE-2026-123294criticalCWE-915

CVE-2026-123294: critical vulnerability in JetBrains Hub

Published · Updated

Follow this CVE+ Monitor Hub

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.6
In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected products
JetBrains · Hub
Related CVEs — JetBrains Hub

In the same product, most dangerous first.

CVE-2026-56142CRITICALCVE-2026-56142EPSS 0.6%CVE-2026-50242CRITICALCVE-2026-50242EPSS 0.6%CVE-2022-34894LOWCVE-2022-34894EPSS 0.6%CVE-2022-48429MEDIUMCVE-2022-48429EPSS 0.6%CVE-2026-86480CRITICALCVE-2026-86480EPSS 0.6%CVE-2022-45471LOWCVE-2022-45471EPSS 0.6%