LOW 3.5 NVD

CVE-2026-86491

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads

References

Published: 2026-09-07 · Source: NVD · Feed updated: 2026-09-07
This low severity vulnerability with a CVSS score of 3.5 was published on 2026-09-07 via NVD.
vulnfeed aggregates 2664 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.