Known vulnerabilities in YouTrack 2026.2.19197

Vendor: JetBrains s.r.o.
Software: YouTrack
Version: 2026.2.19197
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting YouTrack version 2026.2.19197 YouTrack 2026.2.19197 is affected by 10 vulnerabilities: 3 medium, 7 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153167 - Incorrect Privilege Assignment
CVE-2026-103494		 CWE-266 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153166 - Missing Authorization
CVE-2026-103495		 CWE-862 Medium
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153165 - Authorization Bypass Through User-Controlled Key
CVE-2026-103496		 CWE-639 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153164 - Server-Side Request Forgery (SSRF)
CVE-2026-103497		 CWE-918 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153163 - Incorrect Authorization
CVE-2026-103488		 CWE-863 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153162 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-103489		 CWE-79 Medium
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153161 - Missing Authorization
CVE-2026-103490		 CWE-862 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153160 - Authorization Bypass Through User-Controlled Key
CVE-2026-103491		 CWE-639 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153159 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-103492		 CWE-835 Medium
No
No
 2026.2.19422 02.10.2026 SB2026100229
#VU153158 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-103493		 CWE-79 Low
No
No
 2026.2.19422 02.10.2026 SB2026100229