PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-75044 JetBrains CVE debrief

CVE-2026-75044 debrief based on the supplied source corpus. The CVE record was published on 2026-08-17T16:17:51.410Z and has not been modified since then. The NVD entry is currently Analyzed. This high-severity vulnerability in JetBrains YouTrack allows authenticated users to delete arbitrary entities via the mailbox endpoint, affecting versions prior to 2025.3.156085, 2026.1.13914, or 2026.2.18095. Defenders responsible for YouTrack deployments should assess exposure and prioritize verification and remediation efforts to prevent potential data loss or corruption.

Vendor
JetBrains
Product
YouTrack
CVSS
HIGH 8.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-17
Original CVE updated
2026-09-15
Advisory published
2026-08-17
Advisory updated
2026-09-15

Who should care

Defenders responsible for YouTrack deployments, especially those using versions prior to 2025.3.156085, 2026.1.13914, or 2026.2.18095, should assess exposure and prioritize verification and remediation efforts.

Why it matters

CVE-2026-75044 is a high-severity vulnerability in JetBrains YouTrack that allows authenticated users to delete arbitrary entities. Defenders should prioritize verifying exposure, applying updates, and monitoring for suspicious activity to prevent potential data loss or corruption.

  • Potential data loss or corruption due to unauthorized entity deletion
  • Increased risk of data tampering or unauthorized changes
  • Need for verification of YouTrack version and exposure
  • Priority for applying updates or compensating controls

Technical summary

CVE-2026-75044 is a vulnerability in JetBrains YouTrack that allows an authenticated user to delete arbitrary entities via the mailbox endpoint. The vulnerability affects versions prior to 2025.3.156085, 2026.1.13914, or 2026.2.18095. This high-severity issue has a CVSS score of 8.1 and requires immediate attention from defenders to verify exposure, apply updates, and monitor for suspicious activity to prevent potential data loss or corruption.

Defensive priority

Defenders should prioritize verifying exposure in YouTrack deployments, especially those using versions prior to 2025.3.156085, 2026.1.13914, or 2026.2.18095, and assess the need for updates or compensating controls.

Recommended defensive actions

  • Verify YouTrack version and assess exposure
  • Apply updates to affected versions
  • Monitor for suspicious activity
  • Review and update security configurations

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score of 8.1 and the affected versions of YouTrack. However, the corpus does not provide information on known exploitation or specific attack vectors.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-75044 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-75044

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-75044 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-75044

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.