CVE-2026-62422

Published: Jul 14, 2026Modified: Aug 12, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

Affected (6)

Products: Jetbrains: Youtrack

Jetbrains

1 product

Youtrack

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Jetbrains Youtrack	version < 2024.2.148429
Jetbrains Youtrack	2024.3.44799 ≤ version < 2024.3.148430
Jetbrains Youtrack	2025.1.62455 ≤ version < 2025.1.148120
Jetbrains Youtrack	2025.2.86069 ≤ version < 2025.2.148048
Jetbrains Youtrack	2025.3.87341 ≤ version < 2025.3.148033
Jetbrains Youtrack	2026.1.12024 ≤ version < 2026.1.13757

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (1)

https://www.jetbrains.com/privacy-security/issues-fixed/

Source: cve@jetbrains.com

Vendor Advisory

Timeline

No history available yet.