Exploited: 178
LatestCVE-2026-107622 — BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter
VulnFeed.org
AREN

JetBrains YouTrack vulnerabilities and fixes

Exploited and high-severity JetBrains YouTrack vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 7.1CVE-2026-123326In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspensionFix availableJetBrains YouTrack
    1 min read
  2. 7.5CVE-2026-123327In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptionsFix availableJetBrains YouTrack
    1 min read
  3. 7.7CVE-2026-123324In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possibleFix availableJetBrains YouTrack
    1 min read
  4. 7.1CVE-2026-123325In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox pageVerify fixJetBrains YouTrack
    1 min read
  5. 8.4CVE-2026-123323In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requesVerify fixJetBrains YouTrack
    1 min read
Esc