LHeiakim/CVE-2026-86478-PoC

PoC

CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)

view exploit source poc_in_githubauthor LHeiakimpublished 2026-10-21catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-86478US	—	0.61% (49th)	Exploit	2026-09-07
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email address

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.