Critical severity9.8NVD Advisory· Published Sep 7, 2026· Updated Sep 9, 2026
CVE-2026-86478
CVE-2026-86478
Description
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- JetBrains YouTrack: 22 Vulnerabilities Disclosed, Ranging from Account Takeover to Privilege EscalationVypr Intelligence · Sep 7, 2026