CVE-2026-75046: JetBrains Youtrack

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint

Affected products

• JetBrains Youtrack: before 2026.2.18112 (fixed in 2026.2.18112)

Published 2026-08-17. Last modified 2026-09-15.