CVE-2026-86499
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission
- Published Sep 7, 2026
- CVSS 4.3 medium
- 0.3% chance of exploitation in the next 30 days (EPSS)
- A fix is available