High severity8.1NVD Advisory· Published Sep 7, 2026· Updated Sep 9, 2026
CVE-2026-86479
CVE-2026-86479
Description
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- JetBrains YouTrack: 22 Vulnerabilities Disclosed, Ranging from Account Takeover to Privilege EscalationVypr Intelligence · Sep 7, 2026