Jetbrains Youtrack — CVE-2026-100277 (Critical)

Date Sep 30, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product Jetbrains · Youtrack

CVE CVE-2026-100277

Critical vendor advisory CVE-2026-100277

Summary

In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 8.9) in Jetbrains Youtrack. Patch or mitigate promptly. EPSS percentile: 15%.

Operator check

Review CVE-2026-100277 in your asset inventory. Apply patches per vendor guidance and verify Youtrack is not exposed. CVSS score: 8.9. EPSS probability: 0.3%; percentile: 15%.

Sources

NVD — CVE-2026-100277 Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed