high8.1
CVE-2026-75044
In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the…
Impact
In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jetbrains | Youtrack | before 2025.3.156085 from 2026.1 before 2026.1.13914 from 2026.2 before 2026.2.18095 |