CVE-2026-57921

MEDIUM

In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint

CVSS v3.1 Score

4.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE
Published: 6/26/2026Modified: 6/27/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-57921 — In JetBrains YouTrack before 2026.2.16593 improper access control allowed readin...

In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint

CVE-2026-57921
NIST NVD

References (1)

https://www.jetbrains.com/privacy-security/issues-fixed/Vendor Advisory