CRITICAL 9.8 CVE-2026-86478 Published 7 Sept 2026

JetBrains YouTrack Helpdesk Unauthenticated Account Takeover

Worried this affects one of your servers?

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042,

YouTrack Helpdesk had an improper authentication issue that allowed unauthenticated account takeover via a self-asserted email address.