CVE-2026-75050
Received Received - Intake

Denial of Service in JetBrains YouTrack

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: JetBrains s.r.o.

Description
In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2026-75050
EUVD
EUVD-2026-60249

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
jetbrains youtrack to 2026.1.13901 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

In JetBrains YouTrack before versions 2026.1.13901 and 2026.2.17950, a denial-of-service (DoS) attack was possible due to crafted type parameters. This means an attacker could exploit this flaw to disrupt the availability of the YouTrack service.

Detection Guidance

This vulnerability involves a DoS attack via crafted type parameters in JetBrains YouTrack. To detect it, monitor for unusual traffic patterns or crashes in YouTrack instances. Check logs for malformed requests or errors related to type parameters. Ensure your YouTrack version is updated to 2026.1.13901 or later.

Impact Analysis

If you use an affected version of JetBrains YouTrack, this vulnerability could allow an attacker to cause service disruptions, making the system unavailable for legitimate users. This could affect productivity and access to critical data stored in YouTrack.

Compliance Impact

The vulnerability enables a DoS attack via crafted type parameters in JetBrains YouTrack before 2026.1.13901 and 2026.2.17950. This could disrupt service availability, potentially violating compliance requirements for GDPR (availability principle) and HIPAA (accessibility and integrity of data).

Mitigation Strategies

Update JetBrains YouTrack to version 2026.1.13901 or later, or 2026.2.17950 or later to address the DoS vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75050. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart