Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-100263

No fix known EPSS <1%CVSS 4.7

In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible

Published 2026-09-30 · CVE record · OSV

Products: JetBrains YouTrack