CVE-2026-86485

JetBrains YouTrack versions prior to 2026.2.18634 are vulnerable to IP spoofing through HTTP headers, enabling attackers to forge Bitbucket webhooks. This could lead to unauthorized actions being executed within the application, potentially compromising project integrity. Organizations using affected versions should prioritize this vulnerability to mitigate risks associated with unauthorized webhook interactions.