JetBrains You Track <2026.2.19422

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical2high5medium2low

updated 2026-10-27

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-100274US	—	0.84% (58th)	—	no fix	2026-09-30	—
CVE-2026-103492US	—	0.68% (52nd)	—	no fix	2026-10-01	—
CVE-2026-100258US	—	0.65% (51st)	—	no fix	2026-09-30	—
CVE-2026-103489US	medium5.4	0.34% (27th)	—	no fix	2026-10-01	—
CVE-2026-100273US	critical9.8OT elevated	0.30% (23rd)	—	no fix	2026-09-30	—
CVE-2026-100277US	critical9.8OT elevated	0.29% (21st)	—	no fix	2026-09-30	—
CVE-2026-100272US	—	0.29% (21st)	—	no fix	2026-09-30	—
CVE-2026-100267US	—	0.29% (21st)	—	no fix	2026-09-30	—
CVE-2026-100260US	—OT elevated	0.27% (18th)	—	no fix	2026-09-30	—
CVE-2026-103490US	—OT elevated	0.26% (17th)	—	no fix	2026-10-01	—
CVE-2026-100279US	—	0.25% (16th)	—	no fix	2026-09-30	—
CVE-2026-100278US	—OT elevated	0.24% (14th)	—	no fix	2026-09-30	—
CVE-2026-100268US	low2.7	0.23% (14th)	—	no fix	2026-09-30	—
CVE-2026-100271US	—OT elevated	0.23% (13th)	—	no fix	2026-09-30	—
CVE-2026-100264US	—	0.23% (13th)	—	no fix	2026-09-30	—
CVE-2026-103493US	—	0.22% (13th)	—	no fix	2026-10-01	—
CVE-2026-100276US	high7.5OT elevated	0.22% (12th)	—	no fix	2026-09-30	—
CVE-2026-100262US	high7.1OT elevated	0.21% (11th)	—	no fix	2026-09-30	—
CVE-2026-103494US	—	0.21% (11th)	—	no fix	2026-10-01	—
CVE-2026-103488US	—OT elevated	0.21% (11th)	—	no fix	2026-10-01	—
CVE-2026-100257US	medium4.3	0.21% (10th)	—	no fix	2026-09-30	—
CVE-2026-100269US	—OT elevated	0.20% (10th)	—	no fix	2026-09-30	—
CVE-2026-103491US	—	0.20% (10th)	—	no fix	2026-10-01	—
CVE-2026-103495US	—OT elevated	0.19% (9th)	—	no fix	2026-10-01	—
CVE-2026-100259US	—OT elevated	0.19% (9th)	—	no fix	2026-09-30	—
CVE-2026-100263US	medium6.1	0.19% (9th)	—	no fix	2026-09-30	—
CVE-2026-100275US	medium4.8	0.19% (9th)	—	no fix	2026-09-30	—
CVE-2026-100270US	low2.7OT elevated	0.18% (7th)	—	no fix	2026-09-30	—
CVE-2026-100261US	—OT elevated	0.18% (7th)	—	no fix	2026-09-30	—
CVE-2026-100280US	medium4.3OT elevated	0.17% (7th)	—	no fix	2026-09-30	—
CVE-2026-103497US	—	0.15% (4th)	—	no fix	2026-10-01	—
CVE-2026-103496US	—	0.14% (3rd)	—	no fix	2026-10-01	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization8 CVEs
CWE-862Missing Authorization5 CVEs
CWE-639Authorization Bypass Through User-Controlled Key4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan