HIGHCVSS 7.6

CVE-2026-100262

CVE-2026-100262 updated by NVD

Modified: 2026-10-04
Sources: nvd

Summary

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates

References

https://nvd.nist.gov/vuln/detail/CVE-2026-100262

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.