CVE-2026-86478

No fix known EPSS <1%CVSS 9.8

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address