CVE-2021-36209: JetBrains Hub

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.

Affected products

• JetBrains Hub: before 2021.1.13389 (fixed in 2021.1.13389)

Published 2021-08-06. Last modified 2026-06-17.