CVE-2026-28193
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint
Published Feb 25, 2026 · updated Jun 17, 2026 · jetbrains youtrack
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Feb 25, 2026 · NIST NVD
Detected
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint
Jun 17, 2026 · NIST NVD
Updated
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint
Affected
- cpe jetbrains/youtrackversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-28193
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-28193
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint
nvd.nist.gov