CVE-2026-100266

EUVD-2026-90010
In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.7 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 13.66%
Affected Products (NVD)
VendorProductVersion
jetbrainshub
𝑥
< 2026.2.52366
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.jetbrains.com/privacy-security/issues-fixed/