CVE Catalog
CVE-2026-75046
MediumCVSS 4.3Summary
In JetBrains YouTrack before 2026.2.18112, an authenticated user could enumerate accounts via the users search endpoint.
Risk Assessment
An authenticated user could obtain a list of accounts, potentially facilitating brute-force or phishing attacks.
Recommendation
Update YouTrack to version 2026.2.18112 or later to fix the vulnerability.
Original NVD description (English source)
In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint