Known vulnerabilities in YouTrack - page 3

Vendor: JetBrains s.r.o.
Software: YouTrack
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:youtrack:*:*:*:*:*:*:*:*
Website: https://www.jetbrains.com/
Total vulnerabilities: 124
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting YouTrack YouTrack is affected by 124 known vulnerabilities: 1 critical, 3 high, 41 medium, 79 low Critical High Medium Low

Vulnerabilities (124)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143840 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-57926		 CWE-1321 Medium
No
No
 2026.2.16593 17.08.2026 SB2026081796
#VU143839 - Missing Authorization
CVE-2026-57925		 CWE-862 Low
No
No
 2026.2.16593 17.08.2026 SB2026081796
#VU143838 - Incorrect Default Permissions
CVE-2026-57924		 CWE-276 Low
No
No
 2026.2.16593 17.08.2026 SB2026081796
#VU143830 - Missing Authentication for Critical Function
CVE-2026-62422		 CWE-306 Low
No
No
 2024.2.148429, 2024.3.148430, 2025.1.148120, 2025.2.148048, 2025.3.148033, 2026.1.13757 17.08.2026 SB2026081793
#VU143827 - Missing Authorization
CVE-2026-49385		 CWE-862 Low
No
No
 2026.1.13570 17.08.2026 SB2026081788
#VU143826 - Insertion of Sensitive Information Into Sent Data
CVE-2026-49370		 CWE-201 Medium
No
No
 2026.1.13162 17.08.2026 SB2026081791
#VU143825 - Incorrect Authorization
CVE-2026-49369		 CWE-863 Low
No
No
 2026.1.13162 17.08.2026 SB2026081791
#VU143824 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49368		 CWE-79 Low
No
No
 2026.1.13162 17.08.2026 SB2026081791
#VU143813 - Authorization Bypass Through User-Controlled Key
CVE-2026-49386		 CWE-639 Low
No
No
 2026.1.13570 17.08.2026 SB2026081788
#VU129685 - Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-33392		 CWE-1336 Low
No
No
 2025.3.131383 05.05.2026 SB2026050547
#VU123264 - Missing Authorization
CVE-2026-28193		 CWE-862 Medium
No
No
 2025.3.121962 25.02.2026 SB2026022545
#VU122465 - Information Exposure Through Log Files
CVE-2026-25846		 CWE-532 Medium
No
No
 2025.3.119033 09.02.2026 SB2026020942
#VU118311 - Allocation of Resources Without Limits or Throttling
CVE-2025-64773		 CWE-770 Low
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118235 - Operation on a Resource after Expiration or Release
CVE-2025-64686		 CWE-672 Low
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118234 - Improper Certificate Validation
CVE-2025-64685		 CWE-295 Medium
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118233 - Missing Authorization
CVE-2025-64684		 CWE-862 Low
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118232 - Missing Authorization
CVE-2025-64690		 CWE-862 Medium
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118231 - Insufficiently Protected Credentials
CVE-2025-64689		 CWE-522 High
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118230 - Authorization Bypass Through User-Controlled Key
CVE-2025-64688		 CWE-639 Medium
No
No
 2025.3.104432 11.11.2025 SB2025111101
#VU118229 - Missing Authorization
CVE-2025-64687		 CWE-862 Medium
No
No
 2025.3.104432 10.11.2025 SB2025111101


Showing elements 41 - 60 out of 124