Vulnerability Details CVE-2026-75044
In JetBrains YouTrack before 2025.3.156085,
2026.1.13914,
2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 14.0%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-75044
-
cpe:2.3:a:jetbrains:youtrack:2026.1
-
cpe:2.3:a:jetbrains:youtrack:2026.1.12024
-
cpe:2.3:a:jetbrains:youtrack:2026.1.13162
-
cpe:2.3:a:jetbrains:youtrack:2026.1.13570
-
cpe:2.3:a:jetbrains:youtrack:2026.1.13757
-
cpe:2.3:a:jetbrains:youtrack:2026.1.13901
-
cpe:2.3:a:jetbrains:youtrack:2026.1.13903
-
cpe:2.3:a:jetbrains:youtrack:2026.1.13913
-
cpe:2.3:a:jetbrains:youtrack:2026.2
-
cpe:2.3:a:jetbrains:youtrack:2026.2.16593
-
cpe:2.3:a:jetbrains:youtrack:2026.2.17012
-
cpe:2.3:a:jetbrains:youtrack:2026.2.17394
-
cpe:2.3:a:jetbrains:youtrack:2026.2.17548
-
cpe:2.3:a:jetbrains:youtrack:2026.2.17917
-
cpe:2.3:a:jetbrains:youtrack:2026.2.17950
-
cpe:2.3:a:jetbrains:youtrack:2026.2.18068