CVE-2026-86498
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission
- Published Sep 7, 2026
- CVSS 7.7 high
- 0.3% chance of exploitation in the next 30 days (EPSS)
- A fix is available