CVE-2026-61492

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.17394

Description Stored Cross-Site Scripting (XSS) is possible through article titles that are included in digest emails. Stored XSS occurs when an application receives data from a user and includes that data within its later HTTP responses in an unsafe way, allowing a malicious script to be stored on the server and executed in the browser of other users.

Recommendations Update JetBrains YouTrack to version 2026.2.17394 or later.