Medium severity6.5NVD Advisory· Published Sep 7, 2026· Updated Sep 8, 2026
CVE-2026-86489
CVE-2026-86489
Description
In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- JetBrains YouTrack: 22 Vulnerabilities Disclosed, Ranging from Account Takeover to Privilege EscalationVypr Intelligence · Sep 7, 2026