CyberICT

CVE-2026-62422

Jetbrains · Published July 14, 2026

CVSS v3.1

CRITICAL
Patch availableGet patch

Description

In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

Affected Products

  • Youtrack < 2024.2.148429
  • Youtrack < 2024.3.148430
  • Youtrack < 2025.1.148120
  • Youtrack < 2025.2.148048

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H