CVE-2026-75045CWE-288

CVE-2026-75045

Critical · published August 17, 2026

CVSS v3.1
9.1
EPSS
0%
Percentile
35.0
In the wild
Unconfirmed
What it is

In JetBrains YouTrack before 2025.3.156085,

2026.1.13913,

2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.0th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-08-17T20:17Z
Affected products (3)
ProductVersionsFixed in
jetbrains/youtrack< 2025.3.1560852025.3.156085
jetbrains/youtrack≥ 2026.1, < 2026.1.139132026.1.13913
jetbrains/youtrack≥ 2026.2, < 2026.2.181122026.2.18112
References (1)
https://www.jetbrains.com/privacy-security/issues-fixed/ · [email protected]
EPSS history
Timeline
  • 17 AUG 15:54Z
    In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature
    cvelistv5