Medium severity4.3NVD Advisory· Published Sep 7, 2026· Updated Sep 8, 2026
CVE-2026-86499
CVE-2026-86499
Description
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- JetBrains YouTrack: 22 Vulnerabilities Disclosed, Ranging from Account Takeover to Privilege EscalationVypr Intelligence · Sep 7, 2026