CVE-2026-100272

No fix known EPSS <1%CVSS 4.9

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues