GhostLayer Insights

Subscribe

Jetbrains

  • CVE-2026-100277

    In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature

  • CVE-2026-100273

    In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution

  • CVE-2026-100255

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset

  • CVE-2026-106218

    In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible

  • CVE-2026-111094

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible