Known vulnerabilities in YouTrack 2025.3.121962

Vendor: JetBrains s.r.o.
Software: YouTrack
Version: 2025.3.121962
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting YouTrack version 2025.3.121962 YouTrack 2025.3.121962 is affected by 7 vulnerabilities: 1 high, 1 medium, 5 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147341 - Incorrect Authorization
CVE-2026-86498		 CWE-863 Low
No
No
 2025.3.160480, 2026.1.14047 07.09.2026 SB20260907139
#VU147338 - Authentication Bypass by Spoofing
CVE-2026-86478		 CWE-290 High
No
No
 2025.3.161254, 2026.1.14042 07.09.2026 SB20260907136
#VU147331 - Missing Authorization
CVE-2026-86479		 CWE-862 Low
No
No
 2025.3.161254, 2026.1.14055, 2026.2.18788 07.09.2026 SB20260907136
#VU143870 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-75045		 CWE-288 Medium
No
No
 2025.3.156085, 2026.1.13913, 2026.2.18112 17.08.2026 SB20260817104
#VU143861 - Missing Authorization
CVE-2026-75044		 CWE-862 Low
No
No
 2025.3.156085, 2026.1.13914, 2026.2.18095 17.08.2026 SB20260817104
#VU143830 - Missing Authentication for Critical Function
CVE-2026-62422		 CWE-306 Low
No
No
 2024.2.148429, 2024.3.148430, 2025.1.148120, 2025.2.148048, 2025.3.148033, 2026.1.13757 17.08.2026 SB2026081793
#VU129685 - Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-33392		 CWE-1336 Low
No
No
 2025.3.131383 05.05.2026 SB2026050547