CVE-2026-100266

Impact

In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.jetbrains.com/privacy-security/issues-fixed/