PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-75045 JetBrains CVE debrief

CVE-2026-75045 is a critical vulnerability in JetBrains YouTrack that allows unauthenticated attackers to download database backups via shared draft signature. This vulnerability affects YouTrack versions before 2025.3.156085, 2026.1.13913, and 2026.2.18112. The vulnerability has a high impact on data confidentiality and integrity, and defenders should prioritize patching affected versions to prevent potential data exposure. The CVE record and NVD details indicate an unauthenticated attacker could download database backups via shared draft signature, but details on exploitation are limited.

Vendor
JetBrains
Product
YouTrack
CVSS
CRITICAL 9.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-17
Original CVE updated
2026-09-15
Advisory published
2026-08-17
Advisory updated
2026-09-15

Who should care

YouTrack administrators, security teams, and IT professionals responsible for vulnerability management and patching should prioritize patching affected versions to prevent potential data exposure. These stakeholders should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance, and plan vendor-supported updates or mitigations through normal change control where

Why it matters

CVE-2026-75045 is a critical vulnerability in JetBrains YouTrack that allows unauthenticated attackers to download database backups. Defenders should prioritize patching affected versions and verify instance configurations to prevent potential data exposure.

  • Potential data exposure through unauthorized access to database backups
  • Need for immediate patching to prevent exploitation
  • Verification of YouTrack instance configurations and access controls
  • Monitoring for suspicious activity related to database backups

Technical summary

CVE-2026-75045 is a critical vulnerability in JetBrains YouTrack, allowing unauthenticated attackers to download database backups via shared draft signature. Affected versions include those before 2025.3.156085, 2026.1.13913, and 2026.2.18112. The vulnerability has a CVSS score of 9.1 and a severity of CRITICAL. Defenders should review and apply vendor-provided patches for YouTrack, verify YouTrack instance configurations and access controls, and monitor for suspicious activity related to database backups.

Defensive priority

High priority for YouTrack administrators and security teams

Recommended defensive actions

  • Review and apply vendor-provided patches for YouTrack
  • Verify YouTrack instance configurations and access controls
  • Monitor for suspicious activity related to database backups

Evidence notes

The CVE record and NVD details indicate an unauthenticated attacker could download database backups via shared draft signature in JetBrains YouTrack before specific versions. However, details on exploitation are limited.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-75045 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-75045

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-75045 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-75045

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.