VYPR
← All advisories
Critical severity9.9NVD Advisory· Published Jun 19, 2026· Updated Jun 26, 2026

CVE-2026-56142

CVE-2026-56142

Description

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible

Affected products

2
  • Jetbrains/Hub2 versions
    cpe:2.3:a:jetbrains:hub:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:jetbrains:hub:*:*:*:*:*:*:*:*range: >=2024.2.33606,<2024.2.148429
    • (no CPE)range: <2026.1.13757, <2025.3.148033, <2025.2.148048, <2025.1.148120, <2024.3.148430, <2024.2.148429

Patches

Vulnerability mechanics

References

1

News mentions

2