SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-61492

LOW · CVSS 3.5 EPSS 0.39%

Source: NVD + CISA KEV + EPSS · Published 2026-07-10 · Last synced 2026-08-09

CyberRota Analysis

AI-Generated

JetBrains YouTrack versions prior to 2026.2.17394 are vulnerable to stored cross-site scripting (XSS) attacks through article titles in digest emails. This flaw could allow attackers to inject malicious scripts, potentially compromising user data and session integrity. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-61492
Severity
LOW
CVSS
3.5
EPSS
0.39%

Original NVD Description

In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possible

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-75060 HIGH CVE-2026-75059 MEDIUM CVE-2026-75058 MEDIUM CVE-2026-75057 MEDIUM CVE-2026-75056 HIGH CVE-2026-75055 MEDIUM