CVE-2026-75048

HighCVSS 8.2

Published: 17/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

In JetBrains YouTrack before 2026.2.18068, stored XSS via the fenced code-block language label was possible.

Stored XSS could allow an attacker to execute scripts in other users' browsers, potentially leading to session or data theft.

Update YouTrack to version 2026.2.18068 or later.

Original NVD description (English source)

In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible