Critical Alert 4 Active Exploits Detected Today

CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability →
CVE-2026-59310 — Broadcom VMware vCenter Path Traversal Vulnerability →
CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability →
CVE-2026-65400 — Apple macOS Improper Authentication Vulnerability →
Powered by CVE Watchtower
×
August 18, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-75046NVD

Vulnerability Summary

In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint
Severity Level
MEDIUM(4.3)
Published Date
Aug 17, 2026
Last Modified
Aug 17, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.21%Probability
Root Weakness (CWE)
CWE-862: Missing Authorization ↗
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityLow
IntegrityNone
AvailabilityNone

External References