https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-123295/https://vulnfeed.org/cve/CVE-2026-123295/Fri, 06 Nov 2026 10:27:55 +0000In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpointhttps://vulnfeed.org/cve/CVE-2026-123296/https://vulnfeed.org/cve/CVE-2026-123296/Fri, 06 Nov 2026 10:27:55 +0000In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possiblehttps://vulnfeed.org/cve/CVE-2026-123294/https://vulnfeed.org/cve/CVE-2026-123294/Fri, 06 Nov 2026 10:27:54 +0000In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow