CVE-2026-123328: medium-severity vulnerability in JetBrains YouTrack
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
10Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.4
In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Affected products
JetBrains · YouTrackRelated CVEs — JetBrains YouTrack
In the same product, most dangerous first.