High severity7.7NVD Advisory· Published Sep 7, 2026· Updated Sep 8, 2026
CVE-2026-86498
CVE-2026-86498
Description
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- JetBrains YouTrack: 22 Vulnerabilities Disclosed, Ranging from Account Takeover to Privilege EscalationVypr Intelligence · Sep 7, 2026