CVE-2026-62422

EUVD-2026-43656
In JetBrains YouTrack before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,
2024.2.148429 authentication bypass via direct database access leading to administrative access was possible
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 25.21%
Affected Products (NVD)
VendorProductVersion
jetbrainsyoutrack
𝑥
< 2024.2.148429
jetbrainsyoutrack
2024.3.44799 ≤
𝑥
< 2024.3.148430
jetbrainsyoutrack
2025.1.62455 ≤
𝑥
< 2025.1.148120
jetbrainsyoutrack
2025.2.86069 ≤
𝑥
< 2025.2.148048
jetbrainsyoutrack
2025.3.87341 ≤
𝑥
< 2025.3.148033
jetbrainsyoutrack
2026.1.12024 ≤
𝑥
< 2026.1.13757
𝑥
= Vulnerable software versions