Known vulnerabilities in YouTrack 2026.2.17950

Vendor: JetBrains s.r.o.
Software: YouTrack
Version: 2026.2.17950
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting YouTrack version 2026.2.17950 YouTrack 2026.2.17950 is affected by 5 vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-75048		 CWE-79 Low
No
No
 2026.2.18068 17.08.2026 SB20260817108
#VU143872 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-75047		 CWE-409 Medium
No
No
 2026.2.18177 17.08.2026 SB20260817107
#VU143871 - Missing Authorization
CVE-2026-75046		 CWE-862 Low
No
No
 2026.2.18112 17.08.2026 SB20260817104
#VU143870 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-75045		 CWE-288 Medium
No
No
 2025.3.156085, 2026.1.13913, 2026.2.18112 17.08.2026 SB20260817104
#VU143861 - Missing Authorization
CVE-2026-75044		 CWE-862 Low
No
No
 2025.3.156085, 2026.1.13914, 2026.2.18095 17.08.2026 SB20260817104