CVE-2026-61492

31th percentile - higher than 31% of all known CVEs

In JetBrains YouTrack before version 2026.2.17394, a stored XSS vulnerability was discovered via article titles in digest emails. An attacker can inject malicious JavaScript code into an article title, which will be executed in the recipient's browser when viewing the email.

The risk includes session theft, account takeover, or unauthorized actions performed in the victim's context, potentially leading to sensitive data leakage or system integrity compromise.

Immediately upgrade JetBrains YouTrack to version 2026.2.17394 or later, which includes a fix for this vulnerability. Additionally, educate users on recognizing suspicious emails.