Skip to content
brandefense.io
Request A Demo
Trending Vulnerabilities

Why it is trending

CVE-2026-86478

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address

Low
  • CVSS 9.8
  • Public PoC
Buzz
22discussion, 0-100
Danger
42exploitability, 0-100
Mentions
5since 8 Sept 2026
EPSS
0.6%exploit probability
Mentions Per Day · UTCpeak 2
29 days agoToday
Where The Talk Is · by platform5 total
  • X3 mentions · 2 voices
  • GitHub2 mentions · 2 voices · 2 PoC
Newest Public Posts · plain text, newest first

X

  • csirt_it: ‼️ #JetBrains: Proof of Concept (#PoC) per lo sfruttamento della vulnerabilità CVE-2026-86478 relativa a #YouTrack, risulta disponibile in rete Rischio: 🔴 ⚠ Aggiornare tempestivamente il software interessato 👉 link al post principale: https://t.co/eXuSu7fsdK

    @Vulcanux_11 h agolikes 0views 4replies 0Open

  • ‼️ #JetBrains: Proof of Concept (#PoC) per lo sfruttamento della vulnerabilità CVE-2026-86478 relativa a #YouTrack, risulta disponibile in rete Rischio: 🔴 ⚠ Aggiornare tempestivamente il software interessato 👉 link al post principale: https://t.co/drDGlTMJPI

    @csirt_it11 h agolikes 1views 220replies 0Open

  • Warning: Critical #JetBrains YouTrack & Hub flaws! #CVE-2026-86478 & #CVE-2026-86480 (CVSS: 9.8) allow unauthenticated attackers to hijack accounts & gain full superuser access. #Patch #Patch #Patch More info: https://t.co/BpSK8hzaAU

    @CCBalert45 d agolikes 0views 260replies 0Open

GitHub

  • LHeiakim/CVE-2026-86478: CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)

    LHeiakim/CVE-2026-864782 d agostars 0PoCOpen

  • LHeiakim/CVE-2026-86478-PoC: CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)

    LHeiakim/CVE-2026-86478-PoC2 d agostars 0PoCOpen
Public PoC Repositories · third-party code2 links

Links are collected from public posts and are not reviewed by Brandefense. Exploit code can be unsafe or malicious: only study it in an isolated lab, and never run it against systems you do not own.

Get a morning brief and an alert the moment a critical vulnerability like this one starts trending.

Subscribe