Known vulnerabilities in YouTrack 2026.2.18788

Vendor: JetBrains s.r.o.
Software: YouTrack
Version: 2026.2.18788
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 32
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting YouTrack version 2026.2.18788 YouTrack 2026.2.18788 is affected by 32 vulnerabilities: 9 medium, 23 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153155 - Incorrect Authorization
CVE-2026-100278		 CWE-863 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153154 - Incorrect Authorization
CVE-2026-100277		 CWE-863 Medium
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153153 - Incorrect Authorization
CVE-2026-100276		 CWE-863 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-100275		 CWE-79 Medium
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153151 - Allocation of Resources Without Limits or Throttling
CVE-2026-100274		 CWE-770 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153150 - Incorrect Authorization
CVE-2026-100273		 CWE-863 Medium
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153149 - Authorization Bypass Through User-Controlled Key
CVE-2026-100272		 CWE-639 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153148 - Missing Authorization
CVE-2026-100271		 CWE-862 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153147 - Missing Authorization
CVE-2026-100269		 CWE-862 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153146 - Authorization Bypass Through User-Controlled Key
CVE-2026-100268		 CWE-639 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153145 - Inefficient Regular Expression Complexity
CVE-2026-100267		 CWE-1333 Medium
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153144 - Insufficiently Protected Credentials
CVE-2026-100264		 CWE-522 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153143 - Incorrect Authorization
CVE-2026-100270		 CWE-863 Low
No
No
 2026.2.19197 02.10.2026 SB2026100228
#VU153142 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-100263		 CWE-79 Medium
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153141 - Incorrect Authorization
CVE-2026-100262		 CWE-863 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153140 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-100261		 CWE-288 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153139 - Insecure Default Initialization of Resource
CVE-2026-100260		 CWE-1188 Medium
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153138 - Server-Side Request Forgery (SSRF)
CVE-2026-100257		 CWE-918 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153137 - Missing Authorization
CVE-2026-100258		 CWE-862 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227
#VU153136 - Incorrect Authorization
CVE-2026-100259		 CWE-863 Low
No
No
 2026.2.18991 02.10.2026 SB2026100227


Showing elements 1 - 20 out of 32