CVE-2026-86478
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address
- Published Sep 7, 2026
- CVSS 9.8 critical
- 0.6% chance of exploitation in the next 30 days (EPSS)
- A fix is available