High severity8.1NVD Advisory· Published Aug 17, 2026· Updated Sep 15, 2026
CVE-2026-75044
CVE-2026-75044
Description
In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint
Affected products
1Patches
Vulnerability mechanics
References
1- www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory
News mentions
1- JetBrains: 18 Vulnerabilities Across IDEs and YouTrack Disclosed TogetherVypr Intelligence · Aug 17, 2026