SecBoard
Zurück zur CVE-Übersicht

CVE-2026-62422

CRITICAL(10.0)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Risk Signal Score25/100 — MITTEL
  • CVSS 10 — Kritisch

EPSS-Score

0.6%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

10

Technische Schwere

Beschreibung

In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

Betroffene Produkte

  • cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*

Referenzen