CVE-2026-75049

EUVD-2026-60248
In JetBrains YouTrack before 2026.1.13903, 
2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 25.12%
Affected Products (NVD)
VendorProductVersion
jetbrainsyoutrack
𝑥
< 2026.1.13903
jetbrainsyoutrack
2026.2 ≤
𝑥
< 2026.2.17950
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.jetbrains.com/privacy-security/issues-fixed/